Password generator
Create strong, random passwords in seconds. Pick the length and which character types to include — everything is generated in your browser using cryptographically secure randomness, and nothing is ever sent or stored.
Password tools
Other names for this generator — each has its own page:
How to generate a strong password
- Choose how long the password should be — longer is stronger — using the slider or field above. Everything happens in your browser, with nothing sent anywhere.
- Tick the character types to include: uppercase, lowercase, numbers and symbols, and optionally turn on "Avoid ambiguous characters" to skip look-alikes like l, I, 1, O and 0.
- Read the strength meter, then copy your new password — generate again any time you want a fresh one.
About strong passwords
A strong password is long and unpredictable. Length matters most — aim for at least 16 characters — and mixing uppercase, lowercase, numbers and symbols widens the pool an attacker has to guess. The strength meter reflects these choices live, so you can see how each option affects how hard the password is to crack.
FileTinker builds each password with the Web Crypto API, a cryptographically secure random source, rather than a predictable Math.random(). Because it all runs in your browser, your password is never uploaded, logged or stored — it never leaves your device, so it's safe to use for real accounts.
Frequently asked questions
Are these passwords safe to use?
Yes. Each password is generated in your browser using the Web Crypto API (a cryptographically secure random source), not a predictable Math.random(). Nothing is uploaded, logged or stored.
What makes a strong password?
Length matters most. Aim for at least 16 characters and mix uppercase, lowercase, numbers and symbols. The strength meter updates as you change the options.
Can I avoid confusing characters?
Yes. Turn on "Avoid ambiguous characters" to exclude look-alikes such as l, I, 1, O and 0 — handy when a password has to be typed by hand.
Is my password sent anywhere?
No. The generator runs entirely in your browser. Your password never leaves your device.