Password Generator
Generate strong random passwords with a real strength estimate.
Runs in your browser using crypto.getRandomValues — nothing is uploaded
How to use it
- Set the length and which character types to include.
- Press Generate, then copy. Nothing is stored or transmitted.
Questions
Is generating a password in a browser safe?
The randomness comes from crypto.getRandomValues, your operating system’s cryptographic generator — the same source password managers use. The password is never sent anywhere and is gone when you close the tab. The weak point is what you do next: paste it into a password manager rather than a document.
What does the strength figure mean?
Entropy in bits, calculated from the length and the size of the character set. Each extra bit doubles the guessing effort. Below 60 bits is weak for anything valuable; 80 bits and above is strong.
What does "avoid ambiguous characters" do?
It removes 0/O and 1/l/I, which are easy to misread when a password has to be typed from a screen or written down. It slightly reduces entropy, which the strength figure accounts for.