Password Generator
Generate strong, secure random passwords using the Web Crypto API. Customize length and character sets — everything runs locally in your browser, so your passwords never leave your device.
About the Password Generator
This password generator runs entirely in your browser using the Web Crypto API (crypto.getRandomValues), which provides cryptographically secure random numbers. No password ever leaves your device — there is no server, no network request, and no logging. Every password is generated locally and stays local.
What makes a password strong?
- Length is the single biggest factor. Each additional character multiplies the search space. A 16-character password drawn from a full character set is already extremely hard to brute-force.
- Charset size matters. Combining uppercase, lowercase, numbers, and symbols expands the alphabet from 26 to 94 characters, dramatically increasing entropy.
- Randomness defeats guessing. Human-chosen passwords follow patterns (names, dates, keyboard walks). Cryptographically random passwords have no pattern to exploit.
- Uniqueness prevents cascade breaches. One random password per account means a single leak cannot unlock your other accounts.
How to use this password generator
- Adjust the length slider (4–64 characters). Longer is stronger.
- Tick the character sets you want to include.
- Optionally enable Exclude similar characters to avoid confusing look-alikes like i, l, 1, O, 0.
- Click Generate Password, then Copy to send it to your clipboard.
- Paste it into a password manager so you never have to remember it.
Frequently asked questions
Is this password generator safe to use? Yes. Generation happens entirely in your browser via the Web Crypto API. Nothing is uploaded, stored, or logged.
How is strength calculated? Strength is estimated from entropy bits = length × log2(charset size). Roughly: under 40 bits = Weak, 40–60 = Fair, 60–80 = Good, above 80 = Strong.
What does "exclude similar characters" do? It removes characters that are easy to confuse visually (i, l, 1, I, O, 0, o) so the password is easier to read and type.
What length should I choose? For most online accounts, 16–20 characters with all four character sets enabled is a strong, practical choice. For high-value accounts, consider 24 or more.
Are these passwords truly random? Yes. They use crypto.getRandomValues, the same primitive browsers rely on for TLS and other security-critical operations.