RevealTheme logo

Password Generator

Generate cryptographically secure passwords in your browser. Nothing is sent to any server — the random bytes come from your browser's crypto API.

How to use this tool

  1. 1

    Choose the desired password length (8-128 characters).

  2. 2

    Pick which character sets to include — uppercase letters, lowercase, digits, symbols.

  3. 3

    Click Generate. Each click produces a new password.

  4. 4

    Copy the password to your clipboard with one click.

  5. 5

    Store it in a password manager — never reuse it across sites.

What makes a strong password?

Length is the dominant factor in password strength — every additional character roughly doubles the time required to crack it. A 20-character password drawn from the full ASCII printable set offers around 130 bits of entropy, which is computationally infeasible to brute-force with any current hardware. Mixing character sets matters less than length, but it does prevent attacks that target lowercase-only or dictionary-based passwords. Always use a unique password per account — reuse is what turns one breach into many.

Common use cases

  • Creating WordPress admin passwords during site setup

  • Generating API keys and secrets for self-hosted services

  • Resetting compromised credentials after a data breach

  • Creating one-time passwords for shared documents

  • Generating WiFi network passwords for guest networks

Frequently asked questions

Is this password generator safe to use?
Yes. Random bytes come from the browser's crypto.getRandomValues() API, which is cryptographically secure. Nothing is transmitted to any server — generation happens entirely in your browser.
How long should my password be?
At least 16 characters for any account that matters. 20+ for admin or financial accounts. Length defeats brute force; character variety defeats dictionary attacks.
Should I use special characters?
If the site allows them, yes — they make dictionary attacks ineffective. Some legacy systems reject specific symbols; toggle them off if you're hitting validation errors.
Where should I store generated passwords?
A password manager — 1Password, Bitwarden, KeePass. Never plaintext files, never email drafts, never sticky notes.
How often should I rotate passwords?
Modern guidance (NIST 800-63B) recommends rotating only when there's evidence of compromise. Forced periodic rotation produces weaker passwords because users invent predictable patterns.

Related tools