Password Generator Generators
Generate strong random passwords using your browser’s secure randomness.
Password Generator is a free online tool that generate strong random passwords using your browser’s secure randomness. It runs entirely in your web browser using WebCrypto, so files are processed on your own device and never uploaded to a server. There is no sign-up, no file size limit imposed by the site, no watermark and no paid tier.
- Price
- Free — no account, no quota, no watermark
- Category
- Generators
- Where it runs
- In your browser, on your device
- Files uploaded
- None
- Technology
- WebCrypto
- Settings
- 7
- Works offline
- Yes, after the first visit
About Password Generator
Length beats complexity. A 20-character password drawn from lowercase letters alone is stronger than a 10-character one using every symbol on the keyboard — and far easier to type. The entropy figure here is the honest measure: how many bits of genuine randomness the password contains.
How to use it
- Enter length, how many and uppercase a–z.
- Adjust the remaining 4 settings if the defaults do not fit your case.
The 7 settings
| Setting | What it does | Default |
|---|---|---|
| Length | Range 4–128. | 20 |
| How many | Range 1–100. | 5 |
| Uppercase A–Z | On or off. On by default. | On |
| Lowercase a–z | On or off. On by default. | On |
| Digits 0–9 | On or off. On by default. | On |
| Symbols | On or off. On by default. | On |
| Avoid lookalikes (l 1 I O 0) | On or off. On by default. | On |
Under the hood
| Runs on | WebCrypto — supplies cryptographic randomness |
| Controls | Length, How many, Uppercase A–Z, Lowercase a–z, Digits 0–9, Symbols, Avoid lookalikes (l 1 I O 0) |
Questions
How random are these really?
They come from crypto.getRandomValues(), the same cryptographically secure source your browser uses for HTTPS key material. Not Math.random(), which is predictable and unsuitable.
How many bits of entropy do I need?
Below 45 bits is weak. 65–80 bits is comfortable for an account behind rate limiting. Above 90 bits is beyond any foreseeable brute-force attack. The tool shows where your settings land.
Should I avoid lookalike characters?
Yes if you will ever type or dictate it — l, 1, I, O and 0 cause real errors. No if it goes straight into a password manager, since excluding them slightly reduces the alphabet.
Is generating a password in a browser safe?
On this page, yes: it is generated locally, never transmitted, and never stored. The real risk with any online generator is one that quietly logs what it produces — which is impossible here, because there is no server to log to.