Password generator
Strong random passwords, made in your browser. Set the length and the characters your system accepts, then copy it or share it once. Nothing you generate here is sent anywhere.
·
Characters
Readability
How it works
Random, and nothing else.
Made on your device
Every character comes from your browser's cryptographic random number generator. Generating makes no network request, so the password exists only in this tab.
No favourite characters
Every pick is unbiased, so each character in the set is exactly as likely as any other. The strength shown is the true entropy of your settings, not a guess from how the password looks.
Sent separately
A password is only as safe as the channel it travels in. Share it with a link that burns after reading, and send the username somewhere else.
Common questions
How long should a password be?
Twenty random characters, the default here, gives around 130 bits of entropy - far beyond what any attacker can search. If a password manager fills it in for you, going longer costs nothing. Go shorter only when a system forces you to, and treat 12 characters as the floor.
Why are some symbols missing?
Quotes, backslash, backtick and space are left out on purpose. Each needs escaping in a shell command, a .env file or JSON, which is where generated passwords usually end up, and a password that breaks the config tends to get swapped for a weaker one.
What does avoiding look-alike characters do?
It removes characters that are easy to confuse when read off a screen or said aloud: I, l, 1, |, O, 0 and o. Turn it on for anything someone has to type by hand. It costs a little strength per character, which the entropy figure accounts for.
Does every password include each character type I select?
Yes. Every type you switch on appears at least once, so the result passes rules like must contain a number. A password missing a type is thrown away and drawn again rather than patched, which keeps every valid password equally likely.
Is the password stored or sent anywhere?
No. It is generated in this browser tab and never leaves it unless you copy it, or choose to share it - in which case it is encrypted in your browser before anything is stored, like any other secret.