Generators
Password Generator
Generate configurable random passwords locally in your browser.
Choose your options, then generate a password locally in this browser.
About This Tool
Create a random password without sending the generated value to a server. Choose a length from 8 to 128 characters and decide whether to include lowercase letters, uppercase letters, numbers, and symbols. Generation uses the browser's cryptographic random-number API rather than predictable Math.random output, and all password generation happens locally on your device.
How To Use It
- Choose a password length between 8 and 128 characters.
- Select the character types the destination accepts: lowercase, uppercase, numbers, and symbols.
- Generate the password and copy it directly from the result area.
- Store important passwords in a reputable password manager rather than relying on memory or reusing them across accounts.
Examples
General account password
A 20-character password using all four character types gives a broad random character pool while remaining practical for password-manager use.
Service that rejects symbols
Disable symbols while keeping lowercase, uppercase, and numbers enabled when a site's password rules do not permit punctuation.
Long generated secret
Choose a longer value when a service accepts it and you plan to store the result in a password manager instead of typing it manually.
Useful Notes
How randomness is generated
The tool uses Web Crypto's crypto.getRandomValues API. It also rejects random integer values outside an even multiple of the selected character-pool size before taking a remainder, avoiding modulo bias when choosing characters.
Every enabled type is represented
The generator first selects at least one character from every enabled group, fills the remaining positions from the combined pool, then securely shuffles the result. This makes the selected options meaningful without using a fixed character position.
Length and uniqueness matter
Long, independently generated passwords are generally more resistant to guessing than short or reused passwords. A generated password should still be unique to one account; reusing the same value can expose multiple accounts if one service is compromised.
Compatibility varies by service
Websites can impose their own maximum lengths or allowed symbols. This tool cannot know a site's password policy, so adjust the character types or length to match the destination while keeping the result as long and varied as practical.
FAQ
Does Hanakash receive the generated password?
No. This tool generates the value in your browser and does not need an API or server request for password generation.
Why not use Math.random?
Math.random is intended for general-purpose pseudo-random values and is not designed as a cryptographic randomness source. This generator uses the browser's Web Crypto API instead.
Does a generated password guarantee account security?
No. Password security also depends on the service, phishing resistance, device security, recovery settings, and other controls. Use unique passwords and enable multi-factor authentication where appropriate.
Should I save generated passwords in this page?
The tool does not provide password storage. For credentials you need to keep, use a reputable password manager designed for secure storage and synchronization.
Related Tools
UUID Generator
PopularCreate secure random UUID v4 values.
Base64 Encode / Decode
PopularConvert plain text and Base64 in either direction.
Word & Character Counter
PopularInstant word, character, line, and reading-time counts.
URL Encode / Decode
Convert URL text to and from percent encoding.