Password Generator

Strong, random passwords — generated locally.

Generate strong random passwords using your browser's cryptographic random number generator, with configurable length and character sets.

How it works

Passwords are built with crypto.getRandomValues, your browser's cryptographically secure random generator, drawing from the character sets you enable (upper and lower case, numbers, symbols) at your chosen length.

When it helps

Random, unique passwords for every account are one of the best defenses against account takeovers.

How the passwords are generated

Passwords are built with your browser's cryptographically secure random number generator (crypto.getRandomValues), the same source used for encryption keys — not the predictable Math.random. Each character is picked independently from the character sets you enable. Nothing is sent over the network, and nothing is stored: when you leave the page, the password exists only where you pasted it.

To make passwords easier to read and type, look-alike characters are left out: there's no 0 or O, no 1, l or I, and no o. The remaining pool is 24 uppercase letters, 24 lowercase letters, 8 digits and 18 symbols.

How strong is strong enough?

Strength is measured in bits of entropy: the length multiplied by log₂ of the pool size. With all four sets on, each character adds about 6.2 bits, so a 12-character password has about 74 bits and a 16-character one about 99 bits. Anything above roughly 80 bits is far beyond what can be guessed by brute force; length helps much more than adding symbols.

The bigger real-world risk is reuse. Use a different password for every account, store them in a password manager, and turn on two-factor authentication for important accounts like email and banking.

Frequently asked questions

How long should a password be?

16 characters or more is a strong choice for most accounts.

Do you see my password?

No. It's generated in your browser and never sent anywhere. Store it in a password manager.

Some sites reject symbols — what should I do?

Turn off symbols and add a few extra characters of length instead. A 16-character password using letters and digits is still very strong.

Tools In Orbit · About · Contact · Privacy · Terms