Password Generator

Create strong, random passwords with full control over length and character types (uppercase, lowercase, digits and symbols) plus a live strength estimate. Generated entirely in your browser.

16
-
Strength-
Entropy-

How it works

Each character is drawn independently and uniformly from the pool of types you select, using your browser's cryptographically secure random generator. The number of possible passwords is the pool size raised to the length.

entropy (bits) = length × log₂(pool size)

Entropy in bits is the honest measure of strength: it is how many yes/no guesses an attacker would need on average. Adding length helps the most, because it multiplies the work for every extra character.

Nothing is sent anywhere. Passwords are generated locally in your browser and never stored or transmitted.

What this does

A password generator creates strong, random passwords with full control over length and character types — uppercase, lowercase, digits, and symbols — plus a live strength estimate.

How to use it

  1. Set the length.
  2. Choose character types.
  3. Read the strength estimate.
  4. Copy the password.

How it works

Characters are drawn from the Web Crypto secure random generator, not a predictable source. More length and more character types both raise entropy; aim for "Strong" or better. Nothing leaves your device.

entropy bits = length × log₂(character set size)

Example

A 16-character mixed password gives around 100 bits of entropy.

Sources & methodology

Last updated .

Frequently asked questions

Are these passwords safe to use?

Yes. They are drawn from your browser’s cryptographically secure random generator (Web Crypto), not a predictable source, and nothing you generate ever leaves your device.

What makes a password strong?

Length and variety. The strength estimate shows entropy in bits, a measure of how many guesses an attacker would need. More characters and more character types both raise it; aim for “Strong” or better.

Is anything stored or sent?

No. Passwords are generated locally in your browser and never transmitted, logged or saved.