Skip to content
Run here 100% in your browser, no upload, no login

Password Generator

Strong random passwords in your browser: length slider, character sets, ambiguous character filter.

Strength

How to use it

  1. Drag the length slider to pick a password length between 8 and 64 characters.
  2. Toggle the character sets: uppercase, lowercase, digits and symbols. At least one set must stay on.
  3. Turn on Exclude ambiguous characters when a password will be read aloud or typed by hand; it removes I, l, 1, O and 0.
  4. Click Generate. The password is assembled from crypto-grade randomness, with one character drawn from every selected set.
  5. Read the strength bar: it estimates entropy from length and pool size. Click Copy to take the password away.

Common use cases

Why it stays private

The password is produced inside your browser tab with crypto.getRandomValues and never leaves the page. There is no server call, no logging, no submission anywhere, so the generated value exists only on your screen until you copy it.

FAQ

Q: How long should my password be? A: For most accounts, 16 characters with all four sets enabled gives well over 90 bits of entropy. Use 24 or more when the account protects something sensitive and you rarely type it by hand.

Q: Why does the strength bar differ between two passwords of the same length? A: The bar estimates entropy from the size of the selected character pool. Fewer sets mean a smaller pool and a lower score at the same length.

Q: Is it safe to use a generated password? A: The generation itself happens locally with a cryptographic random source, so the result is not predictable from previous passwords. Store it in a password manager rather than a note file, because reuse and sticky notes remain the usual weak points.

Your data stays on this device

Password Generator runs 100% locally. Everything you paste or drop is processed by your own browser and never transmitted. Nothing is stored on our servers — close the tab and it is gone.

Nothing you type is sent to a server, logged, or used for analytics. The page works even with your network disconnected after first load.