Password generator
Create strong, random passwords with cryptographic randomness. Everything runs in your browser; nothing is uploaded or stored.
About this tool
This generator creates random passwords with the browser’s cryptographic random number generator (crypto.getRandomValues) and rejection sampling — the same building blocks security software relies on, and never Math.random. You choose the length and which character sets to include; characters that look alike, such as I, l, 1, O and 0, are excluded by default so a password survives being read aloud or retyped.
The strength meter translates your choices into entropy: length multiplied by the logarithm of the character pool size. A random 20-character password drawn from all four sets carries about 130 bits of entropy. Nothing generated here is stored, logged or transmitted — close the tab and it exists only where you saved it. Generate a different one for every account and keep them in a password manager.
How to use Password generator
- Choose a length and character sets. Ambiguous characters like I, l, 1, O and 0 are excluded by default.
- Generate a password and check the strength estimate.
- Copy it to your clipboard. Generate a fresh one for every account.
Keep the original files and inspect the exported result before publishing or sharing it.
Frequently asked questions
Is the randomness secure enough for important accounts?
Yes. Passwords are drawn with crypto.getRandomValues, a cryptographically secure random number generator, using rejection sampling to avoid modulo bias. Math.random is never used.
Is my password sent anywhere or stored?
No. Generation happens entirely in your browser tab. The password is never uploaded, logged, or saved. Closing the tab discards it.
What does “exclude ambiguous characters” do?
It removes characters that look alike in many fonts — I, l, 1, O, 0 — plus backtick and quotes, so passwords are easier to read and retype correctly.
How is password strength estimated?
Strength is estimated from entropy: password length × log₂ of the character pool size. A random 20-character password drawn from all four sets carries about 130 bits of entropy, far beyond brute-force reach.
Can I reuse a generated password?
You should not. Generate a unique password per account and store them in a password manager. This tool never remembers what it generated.
Related tools
- Random Password Generator — Generate a truly random password in your browser — no patterns, no dictionary words, nothing to guess. Nothing is uploaded or stored.
- Strong Password Generator — Create a strong password and see exactly how strong it is, measured in bits of entropy. Free, private, no sign-up.
- Secure Password Generator — Generate passwords the secure way: drawn from your browser's cryptographic random number generator, created on your device, and never transmitted or…
- 16 Character Password Generator — Generate a 16-character password — the length security guidance converges on for important accounts. Random, cryptographic and created in your…
- JSON formatter, Base64 & URL codec — Format valid JSON and encode or decode UTF-8 Base64 and URL components in your browser.
- JSON workbench — editor, viewer & validator — Edit JSON on the left and inspect it live on the right: validate with exact line-and-column errors, format, explore a collapsible tree, run JSONPath queries and convert to CSV, XML or YAML.
- QR code generator — Turn text or URLs into QR codes with selectable size and error correction. Download as PNG or SVG, all locally.
- Word counter — Count characters, words, lines and paragraphs, and estimate reading time. Paste text or load a .txt file.
- UUID generator — Generate bulk UUID v4 identifiers with cryptographic randomness. Copy the list or download it as text.
- Timestamp converter — Convert Unix timestamps to readable dates and back. Handles seconds and milliseconds, UTC and local time.