Password Generator
Create a strong, random password or a memorable passphrase — generated locally on your device with the Web Crypto API. Nothing is ever sent to a server.
Why use this password generator?
Many "free" password generators quietly nudge you to create an account to "save" your password to their vault, or don't tell you whether generation happens on their server or your device. This tool does neither: it's plain JavaScript running in your browser tab, using the same crypto.getRandomValues() API that security software relies on for real randomness — not a weaker Math.random(). Switch to passphrase mode for a password that's just as strong but far easier to type on a phone or read aloud, in the style of "correct-horse-battery-staple."
Frequently asked questions
Is this password generator really free and unlimited?
Yes — 100% free, no account, no watermark, and no limit on how many passwords you generate.
Are my generated passwords sent to a server or stored anywhere?
No. Every password is generated locally in your browser using the Web Crypto API. Nothing is ever transmitted, logged, or stored by IT Cares.
What's the difference between a random password and a passphrase?
A random password mixes letters, numbers, and symbols (e.g. 8&Kx#mQ2!v) — maximum strength per character but hard to memorize. A passphrase strings together several random dictionary words (e.g. tiger-harbor-velvet-9) — easier to remember and type, and can be just as strong if it uses enough words.
How is the password strength and crack-time estimate calculated?
We calculate entropy in bits from the character set (or word list) size and length, then estimate crack time assuming a fast offline attack of 100 billion guesses per second on average. It's an estimate, not a guarantee — always use a unique password per site and a password manager to store them.