Password Generator
Generate strong random passwords or memorable passphrases with a strength meter, all in your browser.
🔒 Every password is generated in your browser with a cryptographic random number generator (crypto) and never sent to a server.
Two ways to generate
Random mode mixes lowercase, uppercase, digits and symbols into an 8-64 character password and guarantees at least one of each type you enable. Passphrase mode joins several common English words with a separator, so the result is long yet easy to remember. You can tune length, word count, separator, capitalization and a trailing number.
How strength is measured
The meter shows entropy in bits - length x log2(pool size) for random passwords, words x log2(list size) for passphrases - rated Weak, Fair, Strong or Very strong. More bits means better resistance to brute-force guessing; around 60 bits is fine for most accounts and 80+ for important ones.
Made securely
Every character and word is chosen with the browser's cryptographic generator (crypto.getRandomValues) using rejection sampling for zero modulo bias - never Math.random. Nothing is ever sent to a server, so you can copy the result straight into your password manager with confidence.
Frequently asked questions
Are generated passwords sent anywhere?
No. They are created entirely in your browser with a cryptographic random number generator and are never sent to or stored on any server.
Are passphrases as safe as random passwords?
With enough words they reach similar entropy while being far easier to type and remember, which is ideal for passwords you enter by hand, such as your device or password-manager master password.
What does 'exclude ambiguous' do?
It removes look-alike characters (capital I, lowercase l, digit 1, capital O and digit 0) to prevent typos when you read a password off a screen or copy it to another device by hand.