Password Generator
Cryptographically random passwords, generated on your device, never transmitted.
Strength: …
How it works
Passwords are generated with crypto.getRandomValues(), the cryptographic random number generator built into your browser, using an unbiased selection method. The password exists only on this page. It is never sent over the network, logged, or stored. The strength meter shows the theoretical entropy of the generated password based on its length and character pool.
FAQ
Are generated passwords safe to use?
The generation itself is as strong as it gets: browser-grade cryptographic randomness, computed locally. Overall security also depends on you: store passwords in a password manager rather than a notes app, and never reuse the same password across sites.
How long should a password be?
16+ characters is a sensible default for most accounts; 20+ for anything that matters (email, banking, your password manager’s master password). Length matters more than symbol soup: a long passphrase-style password often beats a short complex one.
Why exclude ambiguous characters?
Characters like lowercase L, uppercase I, digit 1, and letter O look alike in many fonts. Excluding them helps when you’ll be typing the password by hand from paper or a screen.