Password Generator
Generate random passwords with the characters you choose. Everything happens on your device.
Passwords are created in your browser and are never uploaded or stored.Which symbols are used?
The symbol set is exactly !@#$%^&*()-_=+[]{}:,.?. Not every website accepts all of these characters, so you may need to turn symbols off for some sites.
Passwords exist only in this page's memory and are never sent, stored or logged. Hiding a password only masks it on screen. Copied text can stay on the clipboard where other apps may read it, and clearing cannot guarantee secure erasure from browser memory.
How to generate a password
- Set the length (8–128) and choose which character groups to use.
- Press Generate password. It stays hidden until you press the eye button.
- Press Copy and paste it into your password manager or the sign-up form.
- Need several? Set how many (1–20) and use Copy all to get one per line.
What this tool does and does not do
It only creates new random passwords. It never reads your existing passwords, rates their strength, checks for breaches or stores anything. Changing a setting clears the current result, so a shown password always matches the settings on screen. Passwords are generated independently, so duplicates in a batch are possible, though extremely unlikely at normal lengths.
Frequently asked questions
Are my passwords sent or stored anywhere?
No. Passwords are generated in your browser and kept only in the page's memory. They are not sent, saved or logged, and they disappear when you clear them or close the page.
How are the passwords generated?
With your browser's crypto.getRandomValues, which provides cryptographically secure random numbers. Characters are chosen without modulo bias, and there is no fallback to weaker randomness: if secure randomness is unavailable, nothing is generated.
What does “include at least one character from each group” do?
Passwords are generated from the whole allowed alphabet and any password missing a selected group is discarded and replaced. No characters are forced into fixed positions.
Which symbols are used?
Exactly these: !@#$%^&*()-_=+[]{}:,.?. Some websites reject some symbols, so turn symbols off if a site refuses the password.
What does “exclude similar characters” remove?
Only the characters 0 O 1 I l from the selected groups. Other look-alike characters are not removed.
Can I be sure a password is safe to use?
This tool makes random passwords but does not rate them or check them against breaches. Use a different password for every account and keep them in a password manager.
How was this tool?
Help us improve Password generator.
Opens your email app; you send it there. No email app? Copy your comment and email feedback@tooltulip.com.
Don't include sensitive data.
0/300