Password Generator
Generate strong random passwords.
Runs entirely in your browser
Loading tool...
How to use
- Set the length. Longer matters far more than exotic characters.
- Choose which character sets to draw from.
- Turn on Exclude look-alikes if the password will be read aloud or typed by hand.
- Select Generate password and copy the result.
Features
- Generated from your browser cryptographic random source.
- Guarantees at least one character from every selected set.
- Optional removal of look-alike characters such as l, 1, I, O and 0.
- Reports entropy in bits, which measures the generator rather than guessing at a cracker.
Frequently asked questions
- Are these passwords safe to use?
- They come from crypto.getRandomValues, the same source used for cryptographic keys, and are generated on your device. Nothing is transmitted or logged.
- What does entropy in bits mean?
- It is the number of random bits behind the password: length multiplied by the log base 2 of the alphabet size. Every extra bit doubles the guessing effort. Above 100 bits is beyond brute force with any foreseeable hardware.
- Should I use symbols or just make it longer?
- Longer wins. Adding four characters to a lowercase-only password buys more entropy than adding the entire symbol set to a short one, and long passwords are easier to type.
- Why exclude look-alike characters?
- If a password will be read from a screen, dictated, or typed from paper, characters like l, 1 and I cause errors. It costs a little entropy and saves a lot of frustration.
Related tools
Several ordinary words, chosen properly — a password you can actually type from memory.
Draw names out of a hat with a seed anyone can check afterwards.
Generate random UUIDs one at a time or in bulk.
Measure how many guesses a password would actually take — not whether it has a capital letter.