Password Generator
Generate strong random passwords or memorable passphrases using your browser's secure random generator. Nothing is sent or stored.
About Password Generator
The Password Generator creates strong random passwords using your browser’s cryptographically secure random number generator, the same kind of randomness used for encryption keys. Choose a length from 6 to 64 characters and decide whether to include uppercase letters, numbers and symbols, or switch to a memorable passphrase made of random words.
Passwords are created on your device and never sent to ToolGhost. A security meter based on estimated entropy shows how hard the result would be to guess, and one click copies it to your clipboard.
How to use the Password Generator
- Pick Random Characters or Memorable Words.
- For random characters, set the length with the slider and tick Uppercase, Numbers and Symbols as required.
- Click Generate New Password for a fresh result. A new one is also generated whenever you change an option.
- Check the strength meter, then click the copy icon and store the password in a password manager.
What it can do
Cryptographically secure randomness
Uses the Web Crypto API (crypto.getRandomValues) with unbiased selection, not a predictable pseudo-random function.
Choose your character sets
Tick Uppercase, Numbers and Symbols to widen the pool. Every extra set increases the strength of a password of the same length.
Passphrase mode
Five random words chosen from a list of 270 (about 40 bits of entropy, plus a two-digit number if enabled) for something easier to remember.
Entropy-based strength meter
The meter reflects the real size of the search space for the chosen settings.
When it is useful
- Creating a unique password for each new online account.
- Generating a long random master password or Wi-Fi key.
- Making a passphrase you can type from memory, such as for a device login.
Good to know
- Use a different password for every account and store them in a reputable password manager.
- For important accounts, use 16 or more random characters or enable two-factor authentication.
- The passphrase mode is easier to remember but weaker than a long random password. About 40 bits is fine for low-risk uses, not for high-value targets.
- Never share a generated password over insecure channels.
Related tools: SSL Checker, QR Code Generator, JSON Formatter, Regex Tester