Password Generator
Generate strong random passwords or passphrases with an entropy readout.
Nothing generated yet
Press Generate. The value is produced in your browser, is never transmitted, and is not stored in your history or preferences.
Runs entirely in your browser. Your data isn't uploaded — this page makes no network request with anything you type, which you can verify in your browser's network tab. How this works.
What is the Password Generator?
A generated password is stronger than a chosen one for a simple reason: humans are bad at randomness and good at patterns, and attackers know the patterns. What matters is entropy — how many equally likely possibilities the generator could have produced.
This tool generates passwords from a character set you control, or passphrases from a word list, and shows the entropy in bits along with a realistic estimate of offline cracking time. Everything is generated locally with the Web Crypto API and nothing is stored or transmitted.
How to use it
- Choose password or passphrase mode.
- Set the length (or word count) and which character classes to include.
- Optionally exclude ambiguous characters such as l, 1, I, 0 and O.
- Press Generate. Check the entropy readout, then copy the result.
Example
A 20-character password and an eight-word passphrase, with entropy shown.
length: 20, all character classes
password ~130 bits of entropy (89-character alphabet) passphrase 8 words, ~82 bits of entropy No generated value appears in this example, in the page source, or in any log.
Features
- Cryptographically secure generation via crypto.getRandomValues()
- Unbiased character selection (rejection sampling, not modulo)
- Passphrase mode with a configurable separator
- Live entropy in bits and an offline cracking-time estimate
- Options to exclude ambiguous characters or require one of each class
- Nothing is logged, stored in history, or written to localStorage