Random String Generator
Free random string generator using cryptographically secure randomness. Generate strong passwords, tokens and UUID v4 values.
Frequently asked questions
Is this safe to use for real passwords?
Yes. It uses the browser's crypto.getRandomValues() API — the same cryptographically secure random source used by encryption libraries — rather than Math.random(), which is not safe for anything security-related since its output can potentially be predicted. Nothing generated here is sent anywhere; it's created and shown entirely in your browser.
What does "exclude ambiguous characters" do?
It removes characters that are easy to misread or mistype when written down or read aloud — 0/O, 1/l/I, and | — useful when a generated string needs to be manually copied, printed, or read over the phone rather than pasted directly.
What is a UUID v4?
A UUID (Universally Unique Identifier) v4 is a 128-bit identifier generated almost entirely from random bits, formatted as 32 hex digits in five groups (e.g. f47ac10b-58cc-4372-a567-0e02b2c3d479). It's "universally unique" in practice because the chance of two randomly generated UUIDs colliding is astronomically small.
How long should a password be?
Longer is generally better than more complex — a longer password using a smaller character set can be harder to crack than a shorter one using every character type. Most current guidance recommends at least 12-16 characters, mixing character types, for anything protecting a real account.