Create a strong random password, or a whole batch of them, with the length and character types you choose. Everything happens in your browser — the password is never sent to us and never stored.
One strong password, regenerated as you change the rules.
Generating…Press again for a completely new password.
20 characters from a pool of 87 ⇒ about 129 bits of entropy.
Between 8 and 128 characters.
Generated locally in your browser. Passwords are never uploaded, stored, or logged — reloading the page throws them away, so copy or download them before you leave.
Looking for something else? Browse all tools.
Every character is drawn from your browser's crypto random source, which is designed for exactly this. Values that would bias the result are discarded rather than reused, so no character or position is more likely than another. Bulk mode uses the same source and the same generator — it is a loop over one password, not a second implementation.
It is the length multiplied by the base-2 logarithm of the character pool you actually allowed — the number of guesses a brute-force attack would need on average if it knew every setting you picked. It says nothing about whether a password is reused, written down, or already leaked, so treat the label as an estimate rather than a guarantee.
Adding length raises the guess count faster than adding character types does. Sixteen lowercase letters already carry more entropy than eight characters drawn from every symbol on your keyboard, and they are far easier to type.
Nothing is written to your device and nothing is uploaded. There is no account, no history and no server-side generation endpoint — closing the tab discards every generated password for good, so copy or download what you need before you leave.
A random password generator that runs entirely in this browser tab. It builds passwords from the character sets you choose, enforces the rules you ask for, and can produce a single password or a batch of up to 500 at once. Nothing you type or generate is sent anywhere.
Every character is drawn with the browser's own cryptographic random number generator, `crypto.getRandomValues`, and the draw uses rejection sampling so no character is more likely than another. `Math.random()` is not used anywhere in the generator — it is not designed for this, and a password built from it is guessable in a way that is invisible on screen.
Excluding look-alike characters removes the shapes that make a password hard to read back off paper — O, 0, o, I, l, 1, | and the backtick — which matters if anyone will retype it by hand. Blocking repeats and sequences rules out the runs (aaa, 321) that guessing tools try first. "Include one of each selected type" guarantees at least one character from every set you tick, which is what most site password policies actually test for.
Single mode gives you one password with a live strength estimate and the size of the pool it was drawn from. Bulk mode produces a list from the same settings, with a copy button per row and export to TXT, CSV, JSON or XLSX. The strength figure is an estimate of how long an offline attack on that password would take, not a guarantee: it cannot know that the password is reused somewhere, or that a site stores it badly.
This page makes no network requests. The passwords are generated in this tab with `crypto.getRandomValues`, and no password, setting or length is transmitted, logged or stored — including in bulk mode, where the whole batch exists only in the page.
Yes, as long as you keep it to yourself. The characters come from the browser's cryptographic random source rather than a predictable sequence, and the page never transmits the result. The two things that would undo that are outside the generator: reusing the password on another site, and storing it somewhere you would not keep your other passwords.
Single mode generates one password that is replaced each time you press Generate, and shows its strength estimate. Bulk mode generates a list — one per line, up to 500 — from the same settings, which is what you want for seeding test accounts. In Bulk mode the batch is not regenerated automatically when you change a setting, because that would discard a list you might already have copied.
Because O and 0, I, l and 1, and the pipe character are easy to confuse when a password is written down or read from a screen and typed somewhere else. Excluding them costs very little entropy for a long password and removes an entire class of 'it says the password is wrong' problems.
No. There is no request from this page at any point, so there is nothing to store them in. You can confirm it yourself: open the browser's developer tools, switch to the Network tab, and generate a batch — no request is made.