RevealTheme logo

Password Generator

Generate cryptographically secure passwords in your browser. Nothing is sent to any server — the random bytes come from your browser's crypto API.

How to use this tool

  1. 1

    Choose the desired password length (8-128 characters).

  2. 2

    Pick which character sets to include — uppercase letters, lowercase, digits, symbols.

  3. 3

    Click Generate. Each click produces a new password.

  4. 4

    Copy the password to your clipboard with one click.

  5. 5

    Store it in a password manager — never reuse it across sites.

What makes a strong password?

Length is the dominant factor in password strength — every additional character roughly doubles the time required to crack it. A 20-character password drawn from the full ASCII printable set offers around 130 bits of entropy, which is computationally infeasible to brute-force with any current hardware. Mixing character sets matters less than length, but it does prevent attacks that target lowercase-only or dictionary-based passwords. Always use a unique password per account — reuse is what turns one breach into many.

Common use cases

  • Creating WordPress admin passwords during site setup

  • Generating API keys and secrets for self-hosted services

  • Resetting compromised credentials after a data breach

  • Creating one-time passwords for shared documents

  • Generating WiFi network passwords for guest networks

Frequently asked questions

Is this password generator safe to use?▼
Yes. Random bytes come from the browser's crypto.getRandomValues() API, which is cryptographically secure. Nothing is transmitted to any server — generation happens entirely in your browser.
How long should my password be?▼
At least 16 characters for any account that matters. 20+ for admin or financial accounts. Length defeats brute force; character variety defeats dictionary attacks.
Should I use special characters?▼
If the site allows them, yes — they make dictionary attacks ineffective. Some legacy systems reject specific symbols; toggle them off if you're hitting validation errors.
Where should I store generated passwords?▼
A password manager — 1Password, Bitwarden, KeePass. Never plaintext files, never email drafts, never sticky notes.
How often should I rotate passwords?▼
Modern guidance (NIST 800-63B) recommends rotating only when there's evidence of compromise. Forced periodic rotation produces weaker passwords because users invent predictable patterns.

Related tools