Password Generator
Generate strong, random passwords with a strength check.
16
Generated using your browser's cryptographically secure random number generator. Nothing is sent anywhere, and passwords aren't stored or logged.
Why Use Our Password Generator?
- Uses your browser's cryptographically secure random number generator
- Adjustable length from 4 to 64 characters
- Toggle uppercase, lowercase, numbers, and symbols independently
- Option to exclude ambiguous characters like O, 0, l, 1, I
- Shows entropy in bits and an estimated crack time
- Nothing is stored, logged, or sent anywhere
Related Developer Tools
View all Developer ToolsFrequently Asked Questions
- How random are these passwords, really?
- Each character is chosen using your browser's cryptographically secure random number generator (the Web Crypto API), the same class of randomness source used for encryption keys — not Math.random(), which isn't designed to be unpredictable enough for security purposes.
- What does the strength meter measure?
- It calculates entropy — the number of possible passwords given your chosen length and character set, expressed in bits. This is the correct measure for a randomly generated password: because every character is independently random, there are no dictionary words or patterns for an attacker to exploit, so raw entropy fully describes how hard the password is to guess.
- Is the crack-time estimate accurate?
- It's a rough, order-of-magnitude estimate based on an assumed guessing speed for an offline attack, meant to give context rather than a precise guarantee. Actual crack time depends heavily on how the password is stored (hashing algorithm, attacker hardware), which this tool has no way to know.
- Are generated passwords stored or sent anywhere?
- No. Generation happens entirely in your browser, and nothing is transmitted, logged, or stored — closing or refreshing the page discards it completely.