Password Generator
Generate ultra-secure passwords instantly in your browser.
boltThe password regenerates automatically whenever you change a setting below.
Character Sets
Security & Usage
How secure is this?
Our generator uses the browser's native Cryptographically Secure Pseudo-Random Number Generator (CSPRNG) with unbiased rejection sampling. Your password is never sent to any server.
Why client-side?
By processing everything locally on your machine, we ensure that zero data leaves your browser. This eliminates the risk of interception or server logs.
Strength Guidelines
We recommend at least 16 characters including uppercase, lowercase, numbers, and symbols for high-value accounts like banking or email — that's about 100 bits of entropy.
Password History
For security reasons, we do not store your generated passwords. Once you refresh or close the page, the generated strings are gone forever.
Frequently Asked Questions
How random are the generated passwords?
Passwords are generated with your browser's cryptographically secure random number generator (crypto.getRandomValues), the same class of randomness used by password managers, with rejection sampling to avoid any statistical bias between characters.
What does "exclude ambiguous characters" do?
It removes characters that look alike (capital O and zero, lowercase l and the digit 1…). Useful when a password must be read aloud or typed by hand — for a small trade-off in entropy, shown live in bits.
What makes a password strong?
Length matters most: 16+ characters mixing upper/lowercase letters, numbers and symbols. Avoid dictionary words and never reuse a password across accounts.
Could anyone else see the passwords generated here?
No. Generation happens entirely in your browser's memory — passwords are never transmitted, logged, or stored anywhere.