Password Generator

Passwords are created on your device with the Web Crypto random generator, using unbiased sampling so every character is equally likely. Choose the length and character types; the estimated strength (entropy) is shown for each setting. Store the result in a password manager.

Length20

How many

Extra characters to exclude

0Entropy (bits)

0Character pool

0Strength

Runs entirely in your browser. Your input and files are not uploaded to any server.

How to use

Choose a length — 16 or more characters is a good default.
Pick the character types the site accepts.
Copy a password into your password manager. Generate again for a new one.

Examples

Website account

20 characters, all character types ≈ 131 bits of entropy.

Wi-Fi password

24 characters without symbols or look-alike characters, easy to type on a TV.

Privacy

Your files and text stay in your browser while you use this tool, and ads or anonymous visit statistics do not receive them. Only your favorites and recent tools are saved on your device. Privacy policy

Want proof? Check it with your browser’s Network tab: How to check that a tool does not upload your files

Frequently asked questions

Are these passwords sent anywhere?

No. They are generated in this page with crypto.getRandomValues and are not stored, logged or transmitted.

What does “exclude look-alike characters” do?

It removes characters that are easy to confuse when reading or typing, such as I, l, 1, O and 0.

How long should a password be?

For accounts protected by a password manager, 16–20 random characters is plenty. Longer is fine if the site allows it.

Related tools

All Security & Privacy

Password Strength CheckerCheck how strong a password is and why.

Text Encrypt / DecryptEncrypt a private note with a password using AES-256-GCM and PBKDF2, then decrypt it later on this page.

UUID GeneratorGenerate random UUID v4 or time-ordered UUID v7 identifiers in bulk using your browser’s secure random generator.

Hash Generator (SHA)Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes and HMAC signatures of text using the browser’s Web Crypto API.

EXIF Viewer & Metadata RemoverView EXIF metadata in JPG photos — camera, date, GPS location — and download a clean copy with metadata removed.

JWT DecoderDecode a JSON Web Token to read its header and payload, with expiry and issued-at times in readable form.