Generate / Passwords

Password Generator.

Strong, random passwords built with the browser's cryptographic random number generator — not Math.random(). Pick a length and which character sets to include, watch the entropy update live, and copy with one click. The password is generated in your tab and never sent anywhere.

Length 20
Include
Avoid

How this works.

Real randomness. Every character is chosen with crypto.getRandomValues, the browser's cryptographically secure RNG, using rejection sampling so no character is even slightly more likely than another (a naive random % n introduces modulo bias). Math.random() is never used — it isn't suitable for anything security-related.

Entropy, in bits. The strength readout is length × log₂(alphabet size) — the number of bits of true randomness in the password. Each extra bit doubles the guessing effort. As a rough guide: under 40 bits is weak, 60 is fair, 80+ is strong, and 100+ is overkill for almost everything. Length buys entropy faster than exotic symbols do — a longer all-lowercase password beats a short one with every symbol set enabled.

Nothing leaves the page. The password is generated locally and is never transmitted, logged, or stored. Reloading the page forgets it. For accounts you actually care about, paste the result straight into a password manager rather than reusing it by memory.

Ready