Create strong, random passwords with your chosen length and character sets. Everything runs in your browser — no server, no account, nothing sent anywhere.
Password strength is measured in entropy — the number of bits needed to guess it by brute force. A 20-character password mixing uppercase, lowercase, numbers, and symbols has roughly 131 bits of entropy, making it effectively uncrackable with current hardware.
As a rule of thumb: use at least 16 characters, always include multiple character types, never reuse passwords across sites, and store them in a dedicated password manager. This tool uses crypto.getRandomValues() — the same cryptographic RNG your browser uses for TLS — so every password generated here is genuinely random.
Are generated passwords stored or sent anywhere?
No. Passwords are generated and displayed entirely in your browser using crypto.getRandomValues() — nothing is transmitted to any server or logged anywhere.
What makes a password secure?
Length matters more than complexity tricks: aim for at least 16 characters mixing uppercase, lowercase, numbers, and symbols. That gives well over 100 bits of entropy, which is effectively uncrackable with current hardware.
Can I choose which character sets to include?
Yes, you can configure length and toggle uppercase, lowercase, numbers, and symbols to match a site's specific password rules.
Is this safe to use for banking or other sensitive passwords?
Yes — the generation happens locally using the browser's cryptographic RNG, the same one used for TLS. As always, store the result in a dedicated password manager rather than reusing it across sites.
TextForge is a free Chrome extension with 58+ text utilities — random string generation, UUID v4, Base64 encode/decode, regex testing, and much more. All local, no server.
Get TextForge — Free on Chrome Web Store →