Password Generator
Generate strong, random passwords in your browser using the cryptographically secure randomness built into your device (the Web Crypto API), not a predictable pseudo-random function. Choose the length and which character sets to include — lowercase, uppercase, digits and symbols — to match a site's rules, optionally exclude look-alike characters such as O and 0, and watch the estimated strength as you go. The generator draws each character independently, so every password is unpredictable. Longer passwords with more character types are exponentially harder to guess. Nothing is transmitted, logged or stored: the password exists only on your screen until you copy it — exactly what you want from a tool that handles credentials.
How to use
- Set the desired length with the slider.
- Choose which character types to include.
- Optionally exclude ambiguous characters like I, l, 1, O, 0.
- Check the strength indicator.
- Copy the password, or regenerate for a new one.
Frequently asked questions
- Are generated passwords stored?
- Never. This tool keeps nothing — passwords exist only in your browser tab and are not saved or sent anywhere.
- How random are they?
- They use the Web Crypto API (crypto.getRandomValues), a cryptographically secure source — not Math.random.
- How is strength measured?
- By entropy: the password length multiplied by the bits per character from your selected character set.
- Why exclude ambiguous characters?
- Characters like I, l, 1, O, and 0 are easy to confuse when typing or reading a password aloud.
- How long should my password be?
- Length matters more than complexity. For important accounts, 16 characters or more with a mix of character types is a strong choice. Where a site allows it, adding length always beats clever character substitutions.
- Could the same password be generated twice?
- In principle two runs could coincide, but for any reasonable length the number of possible passwords is so vast that a repeat is astronomically unlikely. Each generation is independent, so you never need to worry about collisions in practice.
Guides on this topic
- Why In-Browser Tools Keep Your Data Private How client-side tools work, why running entirely in your browser means your data never leaves your device, and how to verify that claim yourself.
- Passwords and Passphrases: What Actually Makes One Strong Why length beats symbol substitution, where password strength meters mislead, how passphrases work, and what two-factor authentication does and does not protect.
Related tools
Password Strength Checker
Estimate password strength via entropy and crack-time. Detects common passwords, sequences, and repeated characters. Nothing leaves your browser.
Random Bytes Generator
Generate cryptographically secure random bytes in 9 output formats — hex, Base64, Base64URL, binary, decimal, C array, Python bytes, UUID v4.
Diceware Passphrase Generator
Memorable, high-entropy passphrases from a curated word list — generated with Web Crypto, never sent anywhere.
WiFi QR Code Generator
Generate a scannable QR code that joins a WiFi network — print it for guests, no app needed.
Group Maker
Split a list of names into balanced random groups — pick the group count or the people per group.
Magic 8-Ball
Type a yes/no question, shake the ball, get one of 20 classic answers — or swap in your own pool. Pure randomness, no judgement.