Password Generator
Generate cryptographically secure passwords in your browser. No data is ever sent to a server.
What makes a password strong? Read our guide →GM6B3YagOsfltrzfClick "Generate" to create multiple passwords at once.
Why use a browser-based password generator?
This generator runs entirely in your browser using the Web Cryptography API (crypto.getRandomValues), which produces cryptographically secure random numbers using the same standard operating systems use for key generation.
Because nothing is sent to a server, you are protected from network interception and server breaches. Compare this to some online generators that log generated passwords server-side, intentionally or not.
How long and complex should a password be?
Password strength is measured in bits of entropy: log₂(charsetSize ^ length). A 16-character password mixing uppercase, lowercase and numbers yields ~95 bits, enough to resist all known brute-force attacks.
For high-value accounts (email, banking, password manager master password) aim for 20+ characters and at least 3 character types. Using a password manager lets you use a unique strong password for every site without memorising them.
What do the character set options mean?
The charset size directly drives entropy: toggling symbols on a 16-char password raises entropy from ~95 to ~105 bits. "Exclude ambiguous" removes characters that look similar in certain fonts, like 0/O and 1/l/I.