How are passwords generated?

Using the browser's cryptographically secure random source (window.crypto). Nothing leaves your device.

How is strength estimated?

As bits of entropy: the password length times the log base 2 of the character-set size. It assumes a uniformly random password, which is exactly how these are generated.

Password Generator

Strong, random passwords, generated entirely in your browser.

Your password

Strength

Bits of entropy

Each bit doubles the number of possible passwords an attacker must try.

entropy = length × log₂(charset size)

< 40: weak; cracked in seconds offline.
40–60: fair; OK for low-stakes accounts.
60–80: strong; resists offline attacks for years.
80+: very strong; future-proof.

Assumes a uniformly random password. Reused or dictionary words have far less effective entropy.

Strong · 0 bits of entropy

Settings

Length

4 128

Lowercase (a-z)

Uppercase (A-Z)

Digits (0-9)

Symbols (!@#…)

Exclude similar

Drops 1, l, I, 0, O, o.

Exclude ambiguous symbols

Drops { } [ ] ( ) / \ ' " ` ~ , ; : . < >

Pick at least one character set.

The URL below carries your settings, not your password. Open it anywhere to generate a fresh password with the same options.

Some inputs are too long to fit in the URL.

Share URL

Anyone with this link can read the values it contains. Do not use it for sensitive data.

How to use the Password Generator

Pick a length and the character classes to include.
Click generate to roll a new password.
Copy with one click.

Frequently asked questions

How are passwords generated?: Using the browser's cryptographically secure random source (window.crypto). Nothing leaves your device.
How is strength estimated?: As bits of entropy: the password length times the log base 2 of the character-set size. It assumes a uniformly random password, which is exactly how these are generated.