Password Generator

Create strong, random passwords using your browser's secure randomness — nothing is generated on a server.

Password Generator

click Generate

🔒 Nothing you enter is sent anywhere or stored. All processing happens in your browser.

How it works

This generator builds passwords from character sets you choose — uppercase, lowercase, numbers, and symbols — using crypto.getRandomValues, the browser's cryptographically secure random number source. That's important: ordinary Math.random() is predictable enough to be unsafe for secrets, while the crypto API is designed for exactly this purpose.

The length slider ranges from 8 to 64 characters. Length is the single biggest factor in password strength — each extra character multiplies the number of possible combinations far more than adding another symbol type does. The optional exclude ambiguous setting removes look-alike characters (O, 0, l, 1, I) so passwords are easier to read and type by hand.

The strength meter estimates entropy in bits, calculated as length × log₂(pool size). Roughly, under 40 bits is weak, 70+ is strong, and 100+ is very strong. Because generation happens entirely in your browser and nothing is transmitted or stored, the password you see is yours alone — copy it straight into your password manager.

Examples

16 characters, all sets → around 100+ bits of entropy (very strong).
Exclude ambiguous → no O/0 or l/1 confusion when typing.
Longer beats fancier: a 24-char lowercase phrase can outscore an 8-char mixed one.

Frequently asked questions

Are these passwords truly random and safe?
They use crypto.getRandomValues, the browser's cryptographically secure random source — appropriate for generating secrets, unlike ordinary Math.random().
Is the password sent anywhere?
No. It's generated in your browser and never transmitted or logged. Even the copy action stays on your device.
What makes a password strong?
Primarily length, then variety of character types. Every extra character adds far more resistance to guessing than a slightly larger symbol set does. Aim for 16+ characters.
Should I reuse a generated password?
No. Use a unique password for every account and store them in a password manager so you never have to remember or reuse them.