Generate a strong, unique, random password. Everything happens right here in your browser — nothing is ever sent to a server.
Ideal for API keys, tokens, and Wi-Fi (WEP/WPA) keys. Overrides the character options below.
Some sites only accept certain symbols. Pick a preset or type your own exact set — only those characters will be used.
Why use this password generator
Truly private
Every password is created entirely in your browser. Nothing is ever sent to a server, logged, or stored — and there are no ads, tracking, or sign-ups. Many online generators cannot promise that.
Maximum entropy
Powered by the Web Crypto API with unbiased rejection sampling, so every character is truly random with no patterns — not the biased output some generators produce.
More control
Custom special-character sets for strict sites, a hexadecimal mode for API and Wi-Fi keys, lengths up to 128, ambiguous-character exclusion, and a live strength meter.
How to create a strong password
Make it long
Aim for at least 16 characters. Every extra character multiplies the number of possible combinations, making brute-force attacks exponentially harder.
Mix it up
Combine uppercase, lowercase, numbers, and symbols. A random mix is far stronger than a word or predictable pattern that a dictionary attack can guess.
Keep it unique
Never reuse a password across accounts. If one service is breached, unique passwords keep the rest of your accounts safe. Store them in a password manager.
Frequently asked questions
How is this different from other password generators?
It is built to be more private and more flexible. Passwords are generated entirely in your browser with the Web Crypto API and unbiased rejection sampling — maximum entropy, with nothing sent, logged, or stored, and no ads or tracking. You also get controls many generators lack: custom special-character sets, a hexadecimal mode, lengths up to 128, ambiguous-character exclusion, a guaranteed mix of character types, and a live strength meter.
Is this password generator safe to use?
Yes. Every password is generated locally in your browser using the Web Crypto API, a cryptographically secure source of randomness. Nothing you generate is transmitted, logged, or stored — not even by forcerocket.
How long should a strong password be?
Use at least 16 characters, mixing character types. Longer passwords dramatically increase resistance to brute-force attacks, and you should never reuse a password across accounts.
Can I restrict which special characters are used?
Yes. Pick a preset symbol set or type your own exact list of allowed characters. The generator will only ever use the symbols you permit — perfect for sites with restrictive password rules.
What are ambiguous characters?
Characters that look alike in many fonts, such as 0/O or 1/l/I/|. Excluding them makes a password easier to read and type without meaningfully weakening it.
Is there a mobile app version?
Yes. This is the free web version of forcekeyper, an offline-first iOS app (on the App Store for iPhone and iPad) that adds a Face ID–gated vault for your passwords and a built-in authenticator for your 2FA codes — all stored on your device with no servers, accounts, or tracking.