Password Generator

Generate strong, random passwords with customizable options.

What Password Generator helps you do

Generate a random password locally with the browser's cryptographic random-number API. Choose a length from 4 to 128 characters and include uppercase letters, lowercase letters, numbers, and symbols to match the destination's password rules. Nothing is stored, and the value exists only in the page until you copy it somewhere safe.

Passwords are generated in your browser with the Web Crypto API. No value is transmitted, logged or stored by Haivix.

How it works

The page builds one pool from the character sets you select, fills a typed array with values from crypto.getRandomValues(), and maps each value to a character in the pool. The length is clamped between 4 and 128. Because the pool is the union of the selected sets, the result is random across all of them but is not guaranteed to contain at least one character from every class.

How to use Password Generator

  1. Choose a length and include every character set the destination service accepts.
  2. Generate a fresh value with the browser cryptographic API and copy it into a password manager.
  3. Check the value against any site rule that requires a specific character class.
  4. Disable only the character sets a site rejects, then regenerate if needed.

When to use it

  • Create a unique password for a new account.
  • Replace a reused or outdated password after a breach notice.
  • Generate a temporary password for a device or local service.
  • Produce a long passcode for a password manager's master entry.
  • Fill in a test account with a value that is not guessable.
  • Create a one-off password for a Wi-Fi guest network.
  • Generate a value that satisfies a specific minimum-length rule.

When not to use it

  • Do not use it for a passphrase you need to type from memory; a longer random string is harder to recall.
  • Do not generate a password for a shared account and send it through chat.
  • Do not rely on the generator alone for high-value accounts; pair it with MFA and a manager.

Example

A new hosting account accepts 32 characters and all four character classes. Generate a 32-character value, confirm that it contains a number and a symbol if the form demands them, then save it in the password manager before closing the tab. If the form rejects the first value because it lacks a number, regenerate rather than shortening the password or removing symbols from every future value.

What you can do with Password Generator

  • Generate passwords from 4 to 128 characters.
  • Include or exclude uppercase, lowercase, numeric, and symbol character sets.
  • Create values locally with crypto.getRandomValues().
  • Copy the generated password without sending it to Haivix.
  • Regenerate as many candidates as you need.
  • See the value before it goes into a password manager.

Example: create a password for a new account

Select every character set the service accepts and use the longest length it supports. Generate a fresh value, save it directly in a reputable password manager, and avoid reusing it anywhere else.

If a site rejects certain symbols, disable that set only when necessary or regenerate to meet its documented policy. A unique long password is more useful than a complicated value reused across accounts.

If the site requires at least one number or symbol, check the generated value before submitting it. The generator draws from the selected pool as a whole, so a short result can occasionally miss a class; regenerate if the form rejects it.

Store the value before you leave the page. The generator deliberately keeps no history, so a password that was copied but not saved is gone after a reload.

What to know before you start

  • The generator does not store or recover passwords after you leave the page.
  • Copying places the value on your device clipboard, where other local apps or clipboard history may be able to read it.
  • Use multi-factor authentication and a password manager for important accounts; generation alone is not a complete security strategy.
  • A generated password is only as safe as the place you save it; avoid pasting it into chat or email.

Common mistakes

  • Using a short password because an old system caps the length.
  • Disabling symbols on every site instead of only the one that rejects them.
  • Copying the value but forgetting to save it before closing the tab.
  • Reusing a generated password across several accounts.
  • Assuming the generator guarantees one character from every selected class.
  • Generating a password in a browser on a shared or borrowed computer.
  • Pasting the value into a chat or email to move it to another device.

Troubleshooting

If a form rejects the password, check its rules for a required uppercase letter, number or symbol. Regenerate until the value satisfies them, or adjust the selected sets.

If the copy button does not work, select the value manually and copy it. Some browsers restrict clipboard access on pages that are not focused.

If the value disappears after a reload, that is expected; nothing is stored. Generate a new one and save it in the manager.

If a site truncates the password, use the maximum length it actually accepts rather than a value that will be cut off.

If the password looks unreadable, that is normal for a random string. Store it in a manager rather than retyping it from memory.

If a legacy system rejects every symbol, choose a long value from letters and numbers only; length still helps more than a small set of predictable substitutions.

Related standards and documentation

  • NIST SP 800-63B recommends length and uniqueness over forced composition rules.
  • The Web Crypto API defines crypto.getRandomValues(), the source of randomness used here.
Long, unique, saved
  • Use the longest length the service accepts.
  • The value is generated locally and never uploaded.
  • Save it in a manager before leaving the page.

Frequently Asked Questions