Security & Crypto

Password Generator

Generate a random password in your browser. It is not saved or sent anywhere.

Results appear here.

What the result means

The ticked sets are joined into one pool, and each character is drawn with crypto.getRandomValues. Values that would make the remainder uneven are discarded, so every character left in the pool stays equally likely. Under the password, an estimate shows length times the base-2 log of the pool size, rounded to one decimal. That number describes the pool. It does not know whether the password will be edited, reused, or saved in a manager. Draws use the whole pool, so a short result can miss a class you ticked. The characters 0, O, 1, l, and I are removed only when the ambiguous option is on. The password is shown for copying and is not stored on this site. A new click replaces it.

Related tools

Advertisement

Questions

How long should a password be?

Use at least 12 characters when you can, and 16 is a sound default if the site allows it. Length adds more than one extra symbol on a short string. This tool accepts 8 to 64.

Is this stored?

No. The password is created in this browser and shown so you can copy it. It is not saved on this site and it is not sent to a server.

What does the entropy number mean?

It is an estimate: length times the base-2 log of the pool size, rounded to one decimal. It is not a crack-time promise, and it does not know if you reuse the password.