Password Generator

The Password Generator creates genuinely random passwords using crypto.getRandomValues — the cryptographic random source built into your browser — never Math.random, never a server. Set the length with the slider, choose which character sets to include, optionally exclude look-alike characters (0/O, 1/l), and generate one password or a batch. The strength meter shows the estimated entropy of your current settings before you generate.

Options

How to use Password Generator

  1. Set the password length with the slider (16 is a good default).
  2. Toggle the character sets: uppercase, lowercase, digits, symbols.
  3. Optionally exclude ambiguous characters for passwords you must read aloud or type by hand.
  4. Press Generate — and generate again for a fresh batch.

Supported behavior

  • Randomness comes from crypto.getRandomValues with rejection sampling, so every character is unbiased.
  • At least one character set must be enabled; the tool reminds you if all are off.
  • The strength meter estimates entropy in bits from length × character-set size — settings, not a guess about one output.

Best for

  • New account passwords and password-manager entries.
  • Wi-Fi, PIN-adjacent and shared-secret codes.
  • Temporary credentials for clients and test accounts.

Limits

  • A strong password still needs a unique one per account and a password manager to remember it — this tool creates them, it does not store them.
  • Some sites silently reject certain symbols or cap password length; if a generated password is refused, shorten it or drop symbols for that site.

Privacy notes

  • Passwords are generated locally with your browser's cryptographic random source and are never transmitted or stored — close the tab and they are gone unless you saved them.
  • Because generation is on-device, even a compromised network cannot see the passwords you create here.

Related tools

Password Generator FAQ

Is it safe to generate passwords on a website?

On this one, yes: the generator runs entirely in your browser using crypto.getRandomValues. The passwords never cross the network, and the page works the same if you disconnect after it loads.

How long should my password be?

Sixteen characters is a solid default for accounts; use 20 or more for high-value ones like email and banking. Length adds entropy faster than exotic symbols do.

What does 'exclude ambiguous' remove?

Characters that are easy to confuse when reading or typing: zero and capital O, one and lowercase L, and capital I. Slightly less entropy, far fewer typos.

Why does the strength meter change when I move the slider?

Entropy is a property of the settings, not of one lucky output: more length and a bigger character set mean more possible combinations an attacker must try.