Are these passwords safe to use?

Yes. They are generated with crypto.getRandomValues, the same CSPRNG your browser uses for TLS. Rejection sampling avoids modulo bias so every character is uniformly chosen.

What length should I pick?

For site passwords stored in a manager, 16–20 characters is plenty. For a master password you must remember, prefer the passphrase generator instead.

How is entropy calculated?

Entropy = log2(charsetSize) × length. With all four sets enabled the pool is 95 characters, so a 20-character password gives ~131 bits — far beyond what offline crackers can reach.

What does “Exclude ambiguous” do?

It removes characters that look alike (I, l, 1, O, 0, o) so the password is easier to read or type by hand.

Is the password uploaded anywhere?

No. Generation and display are 100% local. There is no network call — verify with DevTools → Network.

Can I generate many at once?

This tool focuses on one strong password at a time. For bulk PINs use the Random PIN Generator; for bulk passwords, script the same crypto API.

Password Generator

Strong random passwords generated locally with crypto.getRandomValues.

100% private — no uploads Security & Crypto ToolsFree & unlimited Read tutorial

See how it works

Watch a quick simulation of this tool in action — no file needed.

How to use Password Generator

Follow these steps — everything happens instantly in your browser.

1
Step 1. Set the length with the slider (8–64 characters — longer is stronger).
2
Step 2. Toggle uppercase, lowercase, numbers, symbols, and exclude-ambiguous as needed.
3
Step 3. Click “Generate new” to roll a fresh password.
4
Step 4. Use the eye icon to hide/show, the copy icon or Copy button to grab it.