Password Generator
Create strong, truly random passwords with the character sets you choose. Nothing is sent or saved.
Processed locally in your browser· Your data stays in your browser.
What is Password Generator?
A strong password is long and unpredictable. This generator draws every character with your browser’s cryptographic random number generator (crypto.getRandomValues) and uses rejection sampling, so all characters in the pool are equally likely and there is no modulo bias. It never uses Math.random.
Set the length (4 to 256), tick uppercase, lowercase, digits and symbols, edit the symbol set if a site restricts special characters, optionally exclude look-alike characters (I, l, 1, O, 0) and generate up to 100 passwords at once. When you select several sets, every set is guaranteed to appear at least once. An entropy estimate shows how strong the result is.
How does it work?
- Choose a length: 16 characters or more is a good default for accounts you store in a password manager.
- Select the character sets, optionally exclude ambiguous characters and edit the allowed symbols.
- Press Generate, copy the password and paste it straight into your password manager.
Common use cases
- Creating a unique password for a new online account.
- Generating a batch of temporary passwords for test users.
- Making passwords that can be typed without confusing 0/O or l/1/I.
- Producing passwords for sites that only accept a limited set of special characters.
Examples
Create strong, truly random passwords with the character sets you choose. Nothing is sent or saved.
Privacy
Password Generator runs entirely in your browser. The text or files you provide are processed on your device and are not uploaded, logged or stored on our servers.
Limitations
The entropy figure is an approximation (length × log2 of the pool size). Store passwords in a password manager, never reuse them, and enable two-factor authentication: a strong password does not help if it leaks from the site.
Frequently asked questions
Are the passwords sent or stored anywhere?
No. They are generated inside your browser and disappear when you leave or regenerate. There is no server, log or analytics on the values.
How long should my password be?
For random passwords, 16 characters mixing sets is very strong (about 100 bits). Use 20+ for high-value accounts, and prefer a long passphrase for something you must remember.
Why exclude ambiguous characters?
Characters like I, l, 1, O and 0 look alike in many fonts. Removing them helps when you must read or type the password by hand, at the cost of a slightly smaller pool.
Related tools
Random String Generator
Produce random tokens, IDs and test strings from the character set you need.
Developer Tools
Random Bytes Generator
Get raw random bytes from the browser’s secure generator, formatted the way your code expects.
Developer Tools
UUID Generator
Create one or thousands of universally unique identifiers in any version, formatted exactly the way your code or database expects.
Developer Tools
PBKDF2 Key Derivation Generator
Compute a PBKDF2 derived key from a password, salt, iteration count and hash, and check it against test vectors.
Developer Tools
SHA-256 Hash Generator
Hash any text with SHA-256 and get the 256-bit digest as hex or Base64 in real time.
Hash & Checksum
AES Encrypt (AES-256-GCM)
Turn text into an authenticated AES-256-GCM ciphertext protected by your passphrase, entirely on your device.
Developer Tools
Random Number Generator
Pick random numbers in a range you define: integers of any size, decimals, and no-repeat draws.
Developer Tools