Password Generator
Create strong, truly random passwords with the length and character sets you choose. They’re generated by your browser’s secure random generator and never sent anywhere.
- 🔒 100% private — no uploads
- 🆓 Free, no watermark
- 📱 Works on any device
How to generate
- 1
Set your rules
Pick the length and which character sets to include — lowercase, uppercase, digits and symbols — and optionally exclude look-alike characters.
- 2
Get a strong password
A new password is generated instantly, with a strength meter showing its estimated entropy. Click ↻ for another.
- 3
Copy and use it
Copy the password with one click. It’s generated locally and never stored or transmitted — paste it straight into your password manager.
Why use Password Generator?
Cryptographically secure
Uses your browser’s crypto.getRandomValues with unbiased sampling — not Math.random — so passwords are genuinely unpredictable.
Your rules
Length from 4 to 64, any mix of character sets, and an option to exclude look-alikes (I, l, 1, O, 0, o) for passwords you’ll type by hand.
Strength meter
See an entropy estimate in bits and a four-level strength rating as you adjust the settings.
100% private
Everything happens in your browser. Passwords are never sent to a server, logged or stored — it even works offline.
Why generate passwords in the browser?
A password is only safe if no one else ever sees it. Tools that generate passwords on a server require you to trust that the server doesn’t log them. This generator runs entirely in your browser with the Web Crypto API, so each password exists only on your device until you copy it.
What makes a password strong?
Length and unpredictability. A longer password from a larger character set has more entropy — the number of possibilities an attacker must try. The strength meter estimates this in bits; aim for 80 bits or more (for example, 16+ characters mixing all four sets) for important accounts, and let a password manager remember it.
Frequently asked questions
Are these passwords really random?
Yes. They come from crypto.getRandomValues, the browser’s cryptographically secure random source, with rejection sampling to avoid bias — far stronger than Math.random.
Is the password sent anywhere?
No. It’s generated and shown entirely in your browser. Nothing is uploaded, logged or stored, so the password only exists on your device.
How long should my password be?
For important accounts, 16+ characters mixing uppercase, lowercase, digits and symbols (around 80+ bits of entropy). Use a password manager so length isn’t a burden.