Generate secure random passwords. Fast, secure, and completely free. All processing happens in your browser — no data is sent to any server.
A Password Generator creates a random string using a cryptographically secure random number source, drawing from character sets you choose (uppercase, lowercase, numbers, symbols) at a length you specify, producing a password with genuine entropy rather than one based on a memorable but guessable pattern. Unlike a password you invent yourself — which tends to follow subconscious patterns attackers' dictionaries already account for — a properly generated random password has no exploitable structure at all.
Length and true randomness matter far more for password strength than complexity rules requiring 'at least one symbol' — a 20-character random password is dramatically harder to crack than an 8-character one stuffed with symbols but based on a dictionary word. Generating passwords rather than inventing them also solves the real-world problem of reuse: with a password manager storing a unique generated password per site, there's no need to remember or reuse anything, which is the single biggest practical improvement most people can make to their account security.
16 characters or more is a reasonable general baseline for most accounts today; longer is better where a service allows it, since length is the single biggest factor in resisting brute-force attacks.
Generation uses the Web Crypto API's cryptographically secure random number generator where available, which is suitable for generating real passwords, not a weaker predictable pseudo-random function.
No — the entire point of using a generator is to create passwords with no memorable pattern, which means you should store them in a password manager rather than trying to memorize them.
That option exists specifically for situations where a password must be typed manually (like a shared Wi-Fi password read off a sign) — for a password stored in a manager and copy-pasted, including the full character set is generally preferable for maximum entropy.
No, generation happens entirely in your browser, and nothing you generate is transmitted, logged, or stored.