Password Generator

Create strong random passwords with exactly the length and character sets you want. Every password is generated on this device with the browser's cryptographic random number generator — nothing is sent or stored anywhere.

Options

16
16 or more is a good default for anything that matters.
Character sets
Rules
Your choices are remembered in this browser. The passwords themselves are never saved.

Your password

0 Entropy
0 Pool size
0 Offline crack time*
*At a fixed 100 billion guesses per second — the speed of serious offline cracking hardware. Use it to compare options, not as a promise.

Batch — ten at a time

Handy when setting up accounts for a whole team, or seeding a password manager's import file.

Private by design. This page has no backend. Passwords are created by JavaScript on your own device and are never transmitted or stored. Reload the page and they are gone.

How the randomness works

Each character is drawn with crypto.getRandomValues, the browser's cryptographic random number generator, using rejection sampling so every character in the pool is exactly equally likely — a naive Math.random() or a plain modulo would quietly favour some. If that API is unavailable, the page warns you rather than pretending the password is strong.

Why length beats cleverness

The strength figure shown is entropy: length × log2(pool size). Each extra character multiplies the work of an attacker by the pool size, while swapping a for @ inside an otherwise guessable word barely slows a modern cracker down. A random 16-character password from a 60-character pool carries about 95 bits of entropy — far beyond any realistic brute force.

What the guarantees are

Every enabled character set appears at least once: one character per set is placed first and the whole password is then shuffled with the Fisher–Yates algorithm, so the guarantee leaks nothing about where those characters sit. "No repeated characters" shortens the pool as the password fills; it reduces entropy slightly, and exists for the sites that demand it.

What this tool cannot do

It cannot check whether a particular site allows symbols, and it cannot protect a password after you have used it. Store passwords in a password manager, turn on two-factor authentication where it is offered, and never reuse a password across sites.

Common uses

Signing up for a new service, rotating credentials after a breach notice, setting up Wi-Fi passwords that guests can retype from a printout, generating initial passwords for a class or team in bulk.

How to use the Password Generator

  1. Set how long the password should be.
  2. Choose which character sets to include and whether to avoid look-alike characters.
  3. Generate, then copy the password or create several at once.

Frequently asked questions

How random are the passwords?

They use your browser's cryptographic random number generator, not a predictable pattern.

Why are some similar characters skipped?

The 'avoid ambiguous characters' option removes easily confused pairs like capital I, lowercase l, the digit 1, and the letter O with the digit 0.

Are generated passwords stored or sent?

No. They are created locally and never transmitted or saved.