Password generator
Set the length and character types to generate strong passwords locally with a cryptographic random source.
Passwords are generated locally with a cryptographic random source. Nothing is sent, stored, or logged.
How it works
Generate strong random passwords locally.
- 01
Drag the slider to set the password length.
- 02
Tick the character types to include; optionally exclude ambiguous ones.
- 03
Copy the generated password, or hit refresh for a new one.
FAQ
Is the password truly random and secure?
Yes. Passwords use the browser's cryptographically secure random source (crypto.getRandomValues) with rejection sampling to avoid bias — not the predictable Math.random. With enough length and character variety, the result is strong against brute force. The page also estimates the entropy in bits as a strength reference.
How long should a password be?
At least 12 characters is a common recommendation, and 16+ for important accounts. Strength grows with the size of the character pool raised to the length, so each extra character multiplies the difficulty — adding length beats piling on symbols. The strength label (weak/fair/strong/very strong) is computed from entropy, so tune it above "strong."
What does "exclude ambiguous characters" do?
It drops characters that are easy to misread — the letters O, l, I and the digits 0, 1, plus the vertical bar. If you'll copy a password by hand (writing it down, reading it aloud), excluding them reduces typos; if it's only ever pasted, keeping them makes the pool larger and slightly stronger.
Is the password recorded or uploaded?
No. It's generated entirely in your browser, never sent to this site or any server, and no history is kept. Refresh or close the page and the current password is gone. To keep one, save it to your password manager.