Password Generator
Processed Client SideGenerate strong, cryptographically-random passwords with custom rules. Uses crypto.getRandomValues for true randomness.
Bookmark this tool now — skip the search next time you need it.
About Password Generator
This tool runs entirely in your browser. Whatever you paste is processed on your own device and is never uploaded, logged, or sent to any server.
Generate strong random passwords using the browser cryptographic random number generator. You control the length, how many to produce at once, and which character sets are in play — uppercase, lowercase, digits, symbols — plus an option to exclude ambiguous characters like 0, O, 1, l, and I for passwords that will be read aloud or typed by hand. Each password is shown with its calculated entropy in bits and a strength rating, so you can see the actual effect of adding four more characters rather than guessing. Length matters far more than complexity: a long password from a smaller alphabet beats a short one full of symbols.
Key features
- Cryptographically secure generation via crypto.getRandomValues, never Math.random
- Adjustable length, with entropy recalculated live as you change it
- Four toggleable character sets — uppercase, lowercase, digits, and symbols
- Exclude ambiguous characters (0 O 1 l I) for passwords that will be transcribed or dictated
- Extra characters field to add your own symbols when a site restricts which ones it accepts
- Entropy in bits plus a Weak / Fair / Good / Strong rating for every password
- Generate a batch at once and copy them all, for provisioning several accounts in one pass
- Runs entirely in your browser — generated passwords are never transmitted or logged anywhere
How to use it
- Set the length — 16 or more is a sensible default for anything that matters.
- Choose how many passwords to generate at once.
- Turn the character sets on or off, and add any extra characters the target site requires.
- Enable Exclude ambiguous if someone will have to read or retype the password.
- Click Generate, check the entropy reading, and copy the one you want or the whole batch.
Tips & common mistakes
- Entropy is the number that matters. Aim for 75 bits or more for an important account; under about 50 bits is within reach of a determined offline attack.
- Length beats symbol soup. Adding four characters to a password buys you far more entropy than swapping an a for an @.
- Generate a unique password per site and store them in a password manager. Reuse is what turns one site breach into ten compromised accounts.
- Use Exclude ambiguous for Wi-Fi keys, printed recovery codes, and anything dictated over the phone — it removes the characters people confuse.
- If a site rejects your password, it usually bans certain symbols. Turn symbols off and add the permitted ones in the extra characters field instead of shortening the password.
- Nothing here is sent anywhere, but the clipboard is shared with everything on your machine — paste it into your password manager promptly rather than leaving it there.
- A generated password is only as safe as where it lands. Rotate anything you have pasted into a chat window, a ticket, or a config file committed to git.
- Need to hash or checksum a file or string instead of generating a password? Use the Hash Generator.
- Already have a password and just want to know how strong it is? Check it with the Password Strength Checker.