Secure Password Generator
Generate strong, random passwords with a live strength estimate.
Generators Runs in your browser
16
Are the generated passwords secure?
Password strength is entropy: each character drawn uniformly from a 94-symbol set adds about 6.55 bits, so a 16-character mixed password carries roughly 105 bits — far beyond brute force. This generator draws characters with crypto.getRandomValues, shows a live entropy estimate as you adjust length and character sets, and does all of it on your own machine, with no network round trip involved.
How to use the Password Generator
- 1 Drag the length slider to your target size.
- 2 Check the boxes for lowercase, uppercase, digits and symbols.
- 3 Turn on the ambiguous-character filter if l, 1, O and 0 cause trouble.
- 4 Hit Generate, read the strength meter, then copy.
What you can use it for
- Creating unique passwords for new accounts.
- Generating throwaway secrets for testing.
- Replacing weak or reused passwords.
- Producing PINs from a digits-only charset.
Frequently asked questions
Are the passwords truly random?
They come from crypto.getRandomValues, an operating-system-backed CSPRNG. Unlike Math.random, its output cannot be predicted from previous values, which is the property a password needs.
How strong is a generated password?
Depends on length times charset. Twelve characters over all four sets gives about 79 bits; sixteen gives about 105. Anything above 80 bits resists offline cracking with current hardware.
What does the strength meter mean?
It converts your settings into bits of entropy and buckets the number into ratings. The rating reflects the settings, not the specific password, since every draw from those settings is equally strong.
Why exclude ambiguous characters?
l, 1, I, O and 0 look identical in many fonts. If a password will ever be read aloud or typed from paper, dropping them prevents lockouts at a tiny entropy cost.
Related tools
More Generators
More tools like this:
All Generators