Password Generator
A random, secure password in one click
What makes a password strong?
Length matters more than complexity. A 16-character random password made only of letters and numbers is far stronger than an 8-character one full of symbols. The recommendation: 16 characters or more, fully random, and a different password for every service.
How do you keep track of them all?
Do not try to remember them. Use a password manager (Bitwarden is free, or 1Password, or the one built into your browser). This generator creates passwords using crypto.getRandomValues — cryptographic randomness, not a Math.random that can be guessed.
Do you store the password?
No. Everything runs in the browser — no server, no logs. Close the page and the password is gone. The same principle applies to every tool here — image compression also runs in the browser without uploading a file anywhere.
Frequently asked questions
Is the password stored or sent anywhere?
No. It is generated in your browser using the Web Crypto API. There is no server receiving it and no log. Close the page and it is gone. You can disconnect from the internet before pressing the button and the tool still works.
What matters more, length or special characters?
Length, by a wide margin. A 16-character random password of just letters and numbers is significantly stronger than an 8-character one full of symbols. Every extra character multiplies the search space, whereas adding a character class only widens it a little. The simple rule: 16 characters or more.
What is entropy, and what does the number mean?
Entropy is measured in bits and expresses how many guesses on average are needed to break the password. Each bit doubles the effort. Below 50 bits is weak, 60–80 is reasonable for most uses, and above 100 bits is beyond anything brute force can reach in a meaningful timeframe.
How do I remember a different password for every service?
You do not — that is the point. A password manager remembers for you, and you remember one strong password that opens it. Bitwarden is free and excellent, 1Password is good if you will pay, and even the manager built into Chrome or Safari is far better than reusing one password everywhere.
What is the difference from Math.random?
Math.random is designed for games and simulations, and its output is predictable if you know the generator's internal state. This tool uses crypto.getRandomValues, which draws on the operating system's randomness source and is built for cryptographic use. For passwords the difference is fundamental.
Why is there an option to exclude look-alike characters?
Because 0 and O, and 1 and l and I, look nearly identical in many fonts. If you plan to type the password by hand or read it out over the phone, exclude them. If it lives in a password manager and gets pasted automatically, leave them in — they add a little strength.