THE TOOLKIT Free calculators & converters

Text, Random & Everyday

Password Generator

Generate strong, random passwords right here on the page. The randomness comes from your browser's built-in cryptographic generator, crypto.getRandomValues — the passwords are created on your device and never sent anywhere.

Your password

—
Strength (entropy estimate)—
Entropy—
Character pool size—

How this generator works

Each character is drawn using crypto.getRandomValues, the cryptographic random number generator built into every modern browser — the same source browsers use for security-sensitive work. Characters are picked with rejection sampling so every character in the pool is exactly equally likely (naive modulo math would slightly favor some characters). The generator guarantees at least one character from every class you switch on, then shuffles the result so those guaranteed characters land in random positions.

About the entropy figure: entropy in bits = password length × log2(pool size). A 16-character password drawn from all 89 characters has about 104 bits, meaning an attacker guessing at random faces roughly 2104 combinations. It is an estimate of guessing difficulty assuming truly random selection — it says nothing about passwords that are reused, shared, or stored badly. As a rough guide: under 40 bits is weak, 40–59 fair, 60–79 strong, and 80+ excellent.

Length beats cleverness. Doubling the length of a random password adds far more strength than sprinkling in symbols. For accounts that matter, use 16+ characters, a unique password per site, and a password manager to remember them.

Frequently asked questions

Are these passwords stored or sent anywhere? No. Generation happens entirely in your browser; this page has no server component and no tracking. Once you close the tab, the password is gone unless you saved it.

Why exclude look-alike characters? If you ever have to read a password aloud or type it off a screen, characters like capital I, lowercase l, and the number 1 are easy to mix up. Excluding them shrinks the pool slightly, so add a character or two of length to compensate.

Is a generated password safe to use as-is? Yes — a long, randomly generated, unique password is exactly what security guidance recommends. Store it in a password manager rather than modifying it into something memorable, which usually makes it weaker.

More tools — Text, Random & Everyday

Every tool on this site runs in your browser. Nothing you type is sent anywhere, stored, or tracked.