Password Generator

Generate strong, random passwords. Everything runs in your browser using a cryptographically secure random generator — nothing is sent anywhere.

Options

Why this generator is safe to use

This tool uses the browser's crypto.getRandomValues() API rather than Math.random() — a cryptographically secure random number source designed specifically for security-sensitive uses like password and key generation. Everything runs locally in your browser; no password is ever sent over the network or stored anywhere.

Frequently asked questions

How long should my password be? Longer is generally better — most current guidance recommends at least 12–16 characters for important accounts, since password length has a bigger impact on crack-resistance than character variety alone.

What does the "entropy" strength estimate mean? It measures how many possible passwords could be generated with your chosen length and character set, expressed as bits — more bits means exponentially more combinations an attacker would need to try to guess it.

Should I exclude ambiguous characters? Only if you'll need to type the password manually and might confuse similar-looking characters (like l, 1, I, and 0) — if you'll copy-paste or use a password manager, leaving them in adds a small amount of extra security.