Password Generator

Set length from 8 to 128, tick the character kinds the site accepts, and copy the password with one click. Every character comes from crypto.getRandomValues. The password is built in this tab and never leaves your device.

  1. Choose file
  2. Set options
  3. Get result

Make a random password in this tab. Set the length from 8 to 128 characters, pick uppercase, lowercase, numbers or symbols, then copy it with one click. Every character comes from crypto.getRandomValues, and the password never leaves your device.

How to create a password

  1. Move the slider or type a length from 8 to
  2. 128.
  3. Tick the kinds of characters the site accepts.
  4. A new password appears at once.
  5. Click Copy and paste it where you need it.

Click Generate new for another one with the same settings. Each kind you tick appears at least once.

How strong is it?

Strength is the length times log2 of the alphabet size. With all four kinds, 89 characters are in play, so 16 characters give about 103 bits. Above 80 bits is out of reach for guessing; 128 bits and up is shown as very strong.

Why it stays private

The page has no server step. The browser's secure random source picks each character, with rejection sampling so no character is more likely than another. GustKit does not store or log the password. Keep it in a password manager.

Symbols on or off

SettingWhen to use it
All four kinds onDefault for new accounts when the site allows symbols.
Symbols offWhen the site rejects punctuation. Raise the length a few characters to keep strength.

Frequently asked questions

Is the password sent anywhere?

No. It is built in this tab and never leaves the device.

Is Math.random used?

No. Only crypto.getRandomValues, the browser's secure random source.

What length should I use?

16 or more with all four kinds is a good default. Use the longest a site allows for important accounts.

A site rejects symbols. What now?

Untick Symbols and raise the length a few characters to keep the same strength.