Password Generator

The Password Generator creates random passwords using your browser's Web Cryptography API, crypto.getRandomValues(). You control the length (6 to 64 characters) and which character types to include. The strength meter is a practical guide, not a guarantee against every attack.

How to Use

1. Drag the length slider to set your desired password length (6–64 characters).
2. Toggle uppercase letters, lowercase letters, numbers, and symbols on or off.
3. Enable "Exclude ambiguous" to remove characters like 0, O, l, and 1 that look similar.
4. Click Generate Password or tap the result box to create a new password.
5. Click Copy password to save it straight to your clipboard.

Best Used For

• Creating strong passwords for new online accounts
• Generating API keys or secret tokens for development projects
• Security awareness training in classrooms or workplaces
• Replacing weak or reused passwords one account at a time
• Setting temporary passwords for new users in an organisation
• Generating random strings for testing or code samples

Why Use Spinnit

Passwords are generated in your browser using crypto.getRandomValues(), and Spinnit does not intentionally send the generated password back to a Spinnit server. This page may still load normal site services such as measurement or ads, so store important passwords in a trusted password manager and avoid generating sensitive passwords on shared or compromised devices. Read Password Security Tools, Privacy, and How Spinnit Tools Work for more context.

Password Length and Entropy

Longer passwords are usually stronger than shorter complex-looking ones. A 16-character random password is a good baseline for most accounts, while 20 or more characters is better for email, banking, cloud storage and administrator accounts. Symbols and numbers help, but length and uniqueness matter most.

How to Use Generated Passwords Safely

• Use a different generated password for every account.
• Save passwords in a reputable password manager rather than a notes app or spreadsheet.
• Turn on two-factor authentication for email, banking, hosting and social accounts.
• Never send passwords through chat or email after generating them.
• Regenerate a password if you accidentally paste it somewhere public.