About this password generator
Weak, reused passwords are the most common way accounts get broken into. This generator creates genuinely random passwords using your browser's cryptographic random number generator (crypto.getRandomValues) — the same source operating systems use for security keys. Generation happens entirely on your device: the password is never sent to a server, logged or stored.
How to use it
- Choose a length — 16 characters or more is a good default.
- Tick the character types to include.
- Click Generate, then Copy, and save the password in a password manager.
Worked example
Frequently asked questions
Are the passwords really random?
Yes. They are built from crypto.getRandomValues, a cryptographically secure random source built into every modern browser — not from Math.random, which is predictable.
Can FreshToolkit see my password?
No. The password is created in your browser and never transmitted anywhere. You can even load this page, disconnect from the internet, and generate passwords offline.
How long should a password be?
At least 14-16 characters for important accounts. Length matters more than complexity: every extra character multiplies the guessing effort.
Should I use a different password for every site?
Yes — reuse means one leaked site unlocks the rest. Use a password manager (built into modern browsers, or a dedicated app) so you only need to remember one master password.