Choosing a random password

A random password is useful when a password manager can store it for you. Length, uniqueness and the way it is generated matter more than a visual strength meter.

Start with the account

Use a different password for each account. A breach at one service should not give an attacker the password for another. Enable a supported second factor or passkey where available. A password generator does not protect against phishing, a compromised device, or a website that stores credentials unsafely.

Choose length before complexity

The separate prototype offers 12–128 characters and selectable lowercase, uppercase, digit and symbol groups. It samples using the browser’s cryptographic random generator and rejection sampling, then checks selected groups are represented. Excluding ambiguous characters can make manual transcription easier but reduces the alphabet. Do not shorten or replace random sections with memorable personal details.

Store and use deliberately

Copy only when you need to use the result. Clipboard managers, cloud clipboard synchronization and other applications may retain copied secrets. The prototype does not automatically copy, download or save generated passwords. Its Clear action removes displayed results but cannot promise secure erasure from browser memory or another application.

Why a separate workspace

Advertising code can access the page where it runs. The actual generator is therefore prepared for a separate full-page origin with no advertising, analytics or shared secret messaging. The launch remains disabled until the deployed origin is verified. Do not enter an existing password on this introduction page; it has no password field.

Tools do not remove your applicable legal rights or our responsibilities under applicable law. No security or liability immunity is promised.