Password Generator
Strong, unique passwords — generated locally, seen by no one, not even us.
Generated with your browser's cryptographic random function (crypto.getRandomValues) entirely on this device. Ambiguous characters (l, I, O, 0, 1) are excluded so passwords are easier to read back. Store them in a password manager — and use a different one for every account.
About this tool
Most 'password generator' websites generate your password on their server — meaning a copy of your new password existed on someone else's computer. This one never leaves your device: the characters are picked by your own browser's cryptographic random function, the same source operating systems use for security keys.
Length beats complexity: the readout estimates each password's entropy in bits. 16 characters from the full set is about 94 bits — beyond any realistic brute-force attack. What actually gets accounts hacked is reuse and phishing, so pair these with a password manager and a unique password per site.
How to use it
- Set the length (16+ recommended) and character types.
- Generate, and read the entropy estimate.
- Copy one password per account into your password manager.
Frequently asked questions
Why are some letters missing?
Ambiguous characters — lowercase L, capital I and O, digits 0 and 1 — are excluded so a password read aloud or typed from paper can't be misread. The entropy cost is tiny.
Is 16 characters enough?
With all character types on, ~94 bits of entropy: yes, for any normal account. Banking and email deserve 20+.
Do you store the passwords I generate?
Impossible by design — generation happens in your tab; nothing is sent anywhere.