Password Generator
Generate strong random passwords in your browser, using cryptographically secure randomness.
How to use this tool
- Fill in the options above.
- The result updates as you change the input — there is nothing to submit and nothing to wait for.
- Read the figures in the result panel.
- Use Copy or Download if you need the output elsewhere. Nothing was uploaded at any point.
Passwords are generated with crypto.getRandomValues, the browser’s cryptographically secure random source — not Math.random, which is predictable and unsuitable for anything security-related. Nothing is transmitted or logged.
Password Generator — the specification
| Randomness | crypto.getRandomValues — cryptographically secure |
|---|---|
| Length | 4 to 128 characters |
| Character sets | Uppercase, lowercase, digits, symbols — all optional |
| Look-alikes | Optionally excludes 0 O l 1 I |
| Entropy | Calculated and shown in bits |
How it works
This tool runs entirely in your browser. There is no server involved, which means nothing you type or upload is transmitted, stored, or logged — and there are no usage limits, because there is nothing for us to ration.
You can confirm it yourself: open your browser's developer tools, select the Network tab, and use the tool. No request is made.
A worked example
Run against this page’s own code, with the real input and the real output reproduced below.
What came back
| Entropy | 126 |
|---|---|
| very strongCharacter pool | 80 |
| possible charactersLength | 20 |
Who needs Password Generator
Creating account passwords, API keys, database credentials, or Wi-Fi passphrases.
Password Generator — frequently asked questions
Is it safe to generate a password on a website?
It depends entirely on whether the page sends it anywhere. This one generates in your browser using local randomness and makes no network request — you can confirm that in the Network tab. Never use a generator that submits a form to produce a password.
How long should a password be?
Sixteen characters or more for important accounts. Length matters more than complexity: a long passphrase beats a short string of symbols, and the entropy figure here shows why.
What is entropy?
A measure of unpredictability in bits. Each additional bit doubles the guessing effort. Below 50 bits is weak, 75–100 is strong, and above 100 is very strong against offline attacks.
Should I exclude look-alike characters?
Yes if the password will be read aloud or typed from paper, since 0 and O are easily confused. It slightly reduces entropy, which extra length more than compensates for.
Does this work offline?
Yes. Once the page has loaded you can disconnect from the internet and it keeps working, because all the processing happens in your browser. That is also the simplest way to confirm nothing is being sent anywhere.
Is there a limit on how much I can paste in?
Nothing we impose. The practical limit is your device’s memory, since the work happens locally. Very large inputs get slower rather than being refused.
Related tools
From other categories
Background reading: Free SEO Tools: Meta Tags, Robots.txt, Sitemaps and QR Codes
Your file never leaves your device. Open your browser's Network tab while you use this page and you will see no upload — how that works.
Disclaimer. Published requirements change without notice. Confirm against the official source before you submit. Full disclaimer.