logo logo-dark

Password Generator

Create strong, random passwords right in your browser - choose the length and characters, then copy. Nothing is ever sent to a server.

Strength: -

What is this password generator?

A password generator builds a random password from a pool of characters you control. This one runs entirely in your browser and pulls its randomness from crypto.getRandomValues() - the same cryptographically secure generator browsers use for encryption keys - rather than Math.random(), which is predictable and unsafe for secrets. The password is never sent to our server, never logged, and is gone the moment you close the tab.

The strength meter measures entropy in bits: password length multiplied by the base-2 logarithm of the pool size. A 16-character password drawn from all four sets (about 94 symbols) carries roughly 104 bits, well outside brute-force range. The bar turns green once you pass 80 bits.

How to use the password generator

  • 1. Drag the length slider (4-64; 16 or more is a sensible default).
  • 2. Toggle uppercase, lowercase, numbers and symbols - keep as many on as the site allows.
  • 3. Optionally exclude ambiguous characters (0/O, 1/l/I) for passwords you will type by hand.
  • 4. Click Generate, then Copy. For many at once, set a count, click Generate list and Download .txt.

Features

  • Secure randomness from crypto.getRandomValues(), not Math.random().
  • Length from 4 to 64 with four independent character sets.
  • Live strength meter based on real entropy, not a word-list guess.
  • Bulk mode generates up to 50 passwords and exports them as a text file.
  • Runs fully in your browser - nothing is uploaded, stored, or logged.

When to use it

Reach for it on new account signups, when rotating a password after a breach, while seeding service accounts and API users, or to make a WiFi passphrase. Store each result in a password manager so you never reuse one - a generator only helps if every password is unique.

FAQ

Are these passwords stored anywhere?

No. They are generated locally with your browser's cryptographically secure random generator and are never sent anywhere. Closing the tab clears them.

What password length should I pick?

16 characters with all four character sets is a strong default. Use 20 or more for accounts that matter most, like email, banking and your password manager.

What does "exclude ambiguous" do?

It removes easily confused characters like 0/O and 1/l/I, which helps when you have to read or type a password by hand. It slightly reduces the character pool.

Why not use Math.random()?

Math.random() is not cryptographically secure and can be predicted. This tool uses crypto.getRandomValues(), which browsers provide specifically for security-sensitive randomness.

Related tools