Password Generator
AvailableGenerate strong random passwords in your browser: choose length and character types, exclude look-alikes, and see each password’s strength in bits.
Your password
—
All passwords
Options
How it works
Passwords are generated in your browser with the Web Crypto API (crypto.getRandomValues) using unbiased rejection sampling. Every selected character type is guaranteed to appear. Strength is estimated as entropy: length × log2(number of possible characters). Nothing is sent to a server or stored.
Safeguards & responsible use
- Generated locally with a cryptographically secure random number generator — passwords never leave your browser and are not stored.
- Copying puts the password on your system clipboard; clear it or paste it straight into your password manager.
Frequently asked questions
How long should a password be?
For accounts protected by rate limiting, 12–16 random characters is strong. For anything that could be attacked offline (encryption keys, Wi-Fi), use 20 or more — or let a password manager generate and store it.
What do the bits mean?
Entropy in bits measures how many guesses an attacker needs: each extra bit doubles the work. Around 80 bits is strong for most uses; 100+ bits is very strong.
Why exclude look-alike characters?
Characters such as l, 1, I, O and 0 are easy to misread when a password must be typed or read aloud. Excluding them costs a little entropy, which a slightly longer password makes up for.
Does “each character only once” make it stronger?
No — it slightly lowers entropy because fewer combinations are possible. Some systems require it; otherwise leave it off.