Password Generator

A strong password is the difference between an account that is merely annoying to guess and an account that is effectively impossible to crack. This generator creates random passwords in your own browser using cryptographically secure randomness, so your would-be secrets never travel over a network. You choose the length, the character sets, and whether to avoid the look-alike symbols that cause typos.

How to use

1. Set the length — anything from a snappy 8 characters to a 256-character vault key. The classic guidance is at least 12 to 16 characters for a master password.
2. Choose how many passwords you need, from 1 to 50 — handy when provisioning test accounts in bulk.
3. Tick the character sets to include: lowercase letters, uppercase letters, digits, and symbols. At least one set must stay selected.
4. Optionally exclude ambiguous characters — the ones that look nearly identical in many fonts: i, l, 1, I, O, 0, and o. Enabling this trades a little entropy for much fewer transcription errors.
5. Press Regenerate (or let the widget generate on load) to fill the list. The page shows the estimated entropy in bits and a strength label.

One character from every selected set is guaranteed in each password, so when all four sets are on you always get a mixed pattern like Zk4#v8!Q rather than an all-letters string. Comparison tables and security write-ups often quote entropy as the number that matters: a 16-character password drawn from a full 94-character space carries about 105 bits of entropy, which no offline or online attack can plausibly brute force.

Why character sets matter

With all four sets the search space is 85 distinct characters. Every added length multiples the search space by the pool size, which is why length is always the first lever to pull — a 20-character all-lowercase password already resists brute force far better than an 8-character one with symbols.

Good practices

• Use a password manager. Let the manager generate and store unique random passwords per site; this tool is the right place for master keys and high-value accounts where you plan to remember the value yourself.
• Prefer length over complexity. For a given pool, entropy grows with length. After you pass 16 characters, the ambiguous-character filter is nearly free.
• Never reuse. A leak of one service's database composes into every other site you share that password with.
• Beware the silly mnemonics. "CorrectHorseBatteryStaple" style passphrases are good; replacing letters with numbers in a dictionary word ("P@ssw0rd") is the opposite and is instantly recognized by rule-based crackers.

The security guarantee

The generator uses crypto.getRandomValues, the operating-system backed source of cryptographically secure randomness exposed to every browser. No Math.random() game exists here, and because the component is a self-contained web page element, there is no server endpoint to capture what you generate. Copy the value you like directly from the page.

About the strength meter

Entropy is computed as length × log2(pool size). The label is a rough guide: under 40 bits is weak, 40–60 is fair, 60–80 is good, and above 80 bits is strong. On the dashboard this tool sits alongside the Text Case Converter and Text Statistics — practical, everyday browser utilities that respect your privacy the same way.