Secure Password Generator
The same generator with the security model written out, because that is what this search is really asking.
Searching for a 'secure' generator usually means one question: what happens to the password after it appears on screen? The answer here is that nothing happens. It is produced in memory, displayed, and discarded when you leave the page.
This page also sets a longer default — 20 characters — because a security-focused choice is mostly a length choice. Everything else about it is identical to the standard generator.
How to use it
- Generate a password and copy it immediately.
- Paste it into your password manager before navigating away.
- Close the tab if you are on a shared machine; nothing is persisted either way.
The threat model, stated plainly
In scope: predictability of the random source, bias in character selection, accidental transmission of the result, and persistence of the password in browser storage. All four are addressed — CSPRNG source, rejection sampling, no network calls, and the password itself is never written to any storage.
Out of scope: a compromised device, a malicious browser extension with permission to read page content, and shoulder surfing. A web page cannot defend against those, and any generator claiming otherwise is overselling.
Reviewed 2026-10-21. This tool runs entirely in your browser — no server, no account, and nothing you generate is stored.
Frequently asked questions
Does the page store my password anywhere?
No. It is held in a JavaScript variable while the tab is open. The value is never written to localStorage, cookies or an analytics event.
Is a browser-generated password as secure as one from a desktop app?
The randomness is equivalent if both use the OS CSPRNG. The difference is the surrounding environment: a browser tab shares a process with extensions, a desktop app does not.
Why 20 characters by default here?
Because people searching for 'secure' are usually protecting something they cannot rotate easily. 20 characters gives about 129 bits, which keeps a margin even if the password is later reused by mistake.
Related tools
More from Passwords.