Password generator
Create strong passwords with your browser's cryptographic randomness
Length
Password
Very strong · 129 bits of entropy
The password is generated in your browser and is never sent or stored.
About this tool
The generator creates random passwords for an account, a database, a test service or a .env file. Set the length anywhere from 4 to 128 characters and choose which character sets to include: lowercase, uppercase, digits and symbols. Every selected set appears at least once in the result, which satisfies the usual complexity rules enforced by sign-up forms.
The option to exclude ambiguous characters removes I, l, 1, O, 0 and o, which helps when a password has to be read aloud or typed by hand. Characters are drawn with crypto.getRandomValues, without modulo bias. The entropy shown in bits comes from the length and alphabet size, and rates the password from Weak to Very strong. Nothing is sent or stored.
How to use it
- Set the Length with the slider, from 4 to 128 characters.
- Check the sets you want: Lowercase (a-z), Uppercase (A-Z), Digits (0-9), Symbols (!@#…).
- Check “Exclude ambiguous characters” if the password will be read or typed by hand.
- Click “Generate”, check the entropy, then click “Copy”.
Frequently asked questions
How long should my password be?
Aim for at least 80 bits of entropy, the point where the tool shows “Strong”: with all four sets checked, that takes 13 characters. The default length of 20 characters gives about 129 bits, which is rated “Very strong”.
How is entropy calculated?
It is the length multiplied by the base-2 logarithm of the number of possible characters. Below 50 bits a password is Weak, then Fair up to 80, Strong up to 120 and Very strong beyond that. It is an estimate that holds for randomly drawn passwords.
Is the password stored or sent anywhere?
No. It is generated in your browser with crypto.getRandomValues, with no network request, and is never sent or stored. Only your settings, meaning the length and the selected sets, are saved locally for your next visit.
Which symbols are used?
The Symbols set contains 25 ASCII characters: ! @ # $ % ^ & * ( ) - _ = + [ ] { } ; : , . ? / and ~. Quotes, the apostrophe, the backslash, spaces and the < > | signs are left out, which reduces escaping issues.