Password Generator

A password generator creates a high-entropy secret instead of asking a person to invent a predictable phrase. Strength comes from randomness and the size of the possible character space, not from decorative substitutions such as replacing an 'a' with '@'. A useful generator makes length the primary control and clearly communicates which characters are included so a user can satisfy a service's policy without weakening the result.

Use a cryptographically secure random source, generate locally, and avoid copying the value into logs, analytics, screenshots, or shared notes. Prefer long unique passwords stored in a reputable password manager. If a service rejects a character set, reduce ambiguity or choose a longer value rather than reusing an old password. Never use a password generator to create API keys unless the provider's format and rotation policy explicitly allow it.

A password should not need to travel to a remote generator before it is shown to you. Browser-side generation keeps the secret out of server logs and makes the operation available offline. This is not a guarantee against local malware, browser extensions, clipboard history, or shoulder surfing, so clear the clipboard and store the password promptly. The safest workflow combines local generation, unique credentials, multi-factor authentication, and a tested recovery path.