Password Generator

Build a strong password from the length and character types you choose.

About this tool

Passwords here are generated with the browser’s built-in cryptographic random number generator (crypto.getRandomValues). Unlike an ordinary random function, it is designed so that seeing earlier output tells you nothing about what comes next, which is what makes it suitable for passwords. Nothing generated is stored or transmitted anywhere.

The estimated strength is shown in bits, a measure of how many attempts a brute-force search would take on average — each additional bit doubles the number of possibilities. The useful thing to take from it is that length contributes far more than variety: sixteen lowercase letters beat ten characters drawn from every category.

Excluding ambiguous characters removes the ones that are hard to tell apart by eye — capital O against zero, lowercase l against capital I and the digit one. That is worth doing for a password you will copy off paper or read aloud to someone. It does slightly reduce strength at a given length, since there are fewer characters to draw from.

Back to all tools