Password Generator

How to use Password Generator

1. 1Set the length. Drag the slider - 16+ characters is a solid default for important accounts.
2. 2Choose character sets. Toggle uppercase, lowercase, numbers and symbols. More sets mean more entropy per character.
3. 3Exclude ambiguous characters. Optionally drop lookalikes like 0/O, 1/l/I for passwords you might type by hand.
4. 4Generate and copy. Generate one password or a batch, check the strength meter, and copy what you need.

Password Generator Features

• ✓crypto.getRandomValues - never Math.random
• ✓Length slider up to 128 characters
• ✓Uppercase, lowercase, numbers, symbols toggles
• ✓Exclude-ambiguous-characters option
• ✓Batch generation (up to 50)
• ✓Live entropy strength meter
• ✓Works fully offline

Password Generator Frequently asked questions

Are these passwords truly random?

Yes. The generator uses crypto.getRandomValues(), the browser's cryptographically secure random number generator - the same primitive behind TLS keys. It never uses Math.random(), which is predictable and unsafe for secrets.

How long should my password be?

For a random password with all character sets, 16 characters gives about 105 bits of entropy - far beyond brute-force reach. 20+ is comfortable overkill. Length beats complexity: a long simple password outperforms a short complex one.

What does the entropy meter mean?

Entropy (bits) measures how many guesses an attacker needs on average: bits = length × log2(pool size). 80+ bits is strong, 100+ is excellent. The meter updates live as you change options.

Are my generated passwords stored or sent anywhere?

No. Generation happens in your browser's memory using Web Crypto. Nothing is transmitted, logged or stored - close the tab and they're gone unless you saved them.

Should I use the same generated password everywhere?

No - generate a unique password per site and store them in a password manager. This tool makes that painless: generate a batch and save each one.

Related tools