Password Generator
Generate strong random passwords with a cryptographically secure RNG. Choose length and character sets, exclude look-alike characters, see the entropy in bits.
Processed locally in your browser — nothing is uploaded.
Password Generator
≈ 130 bits of entropy per password (very strong)
Passwords
Output appears here…Generated with your browser's CSPRNG using rejection sampling, so every character is drawn uniformly — no modulo bias. Nothing leaves this page.
About Password Generator
Generate one or many random passwords using your browser's cryptographically secure random number generator. Rejection sampling keeps every character equally likely — a subtle bias that affects naive generators using the modulo operator is avoided entirely.
Pick a length from 4 to 128, toggle lowercase, uppercase, digits, and symbols, and optionally exclude characters that look alike (0, O, 1, l, I) for passwords someone might have to read aloud or type by hand. A live entropy estimate shows roughly how hard the result is to brute-force.
Common uses
- Create a strong password for a new account or service
- Generate temporary credentials for teammates in bulk
- Produce readable one-time codes without ambiguous characters
Limitations
- Entropy assumes an attacker must brute-force; a leaked or reused password has zero effective entropy
- Passwords exist only on this page — copy them into a password manager before leaving
Frequently asked questions
Can anyone else see the passwords this tool generates?
No. Passwords are generated on your device using the browser's cryptographically secure random number generator and are never transmitted, logged, or stored — once you leave the page they are gone.
How many bits of entropy does a strong password need?
Around 80 bits or more is very strong against offline brute-force; below 45 bits is weak. Entropy here is length × log2(pool size), so a 20-character password using all four character sets (an 89-character pool) has about 130 bits.
What is modulo bias in password generation?
Naive generators map random numbers onto the character pool with the % operator, which makes characters at the start of the pool slightly more likely. This tool uses rejection sampling — out-of-range random draws are discarded — so every character is exactly equally likely.
Is a longer password better than a more complex one?
Usually yes. Entropy grows linearly with length but only logarithmically with pool size: adding 4 characters to an all-sets password adds about 26 bits, while adding the entire symbol set to a letters-and-digits password of the same length adds under 9. Length and complexity together are best.
Why would I exclude ambiguous characters?
The option removes 0, O, 1, l, and I, which look alike in many fonts — useful when someone must read a password aloud or type it from paper. It shrinks the pool slightly, so entropy per character drops a little; add a couple of characters of length to compensate.