Password Generator
Generate a strong, random password instantly — entirely in your browser.
Generate secure random passwords online
This tool creates cryptographically random passwords entirely in your browser using the Web Crypto API. No data is sent to any server — the password never leaves your device. Choose your desired length between 4 and 128 characters, and select which character sets to include: lowercase letters, uppercase letters, digits, and symbols.
Enable Avoid ambiguous to exclude characters that look similar in many fonts — such as O, 0, I, l, and 1 — reducing transcription errors when typing passwords by hand.
The strength indicator estimates entropy in bits based on the pool of characters used and the password length. A password with 80 or more bits of entropy is rated strong; 60–79 bits is fair; below 40 is weak.
FAQ
Is the password sent anywhere? No. Generation uses crypto.getRandomValues locally; nothing is uploaded.
Why use rejection sampling? Simple modulo reduction of a random integer introduces a small statistical bias. Rejection sampling discards values outside the largest exact multiple of the pool size, ensuring every character is equally likely.
What counts as a symbol? The set used is !@#$%^&*()-_=+[]{};:,.? — characters widely accepted by most services without causing parsing issues.
How long should my password be? At least 16 characters with mixed character sets is recommended for most accounts. Use a password manager to store them so each account gets a unique password.