Password Generator
Generate strong, random passwords with custom length and character sets.
How to Use
- Set your desired password length using the slider.
- Toggle character sets: uppercase (A–Z), lowercase (a–z), numbers (0–9), and symbols.
- Click Generate or let the password update automatically.
- Check the strength indicator, then click Copy.
When to Use This
- Rotating a service account or database credential that no human will ever type, where you can push the slider to 64 characters at no usability cost.
- Meeting a corporate policy that demands symbols and a minimum length, since the symbol set is one toggle and the exact length is on the slider.
- Creating a throwaway credential to hand someone over a separate channel and then discard, when a shared password manager vault is not yet in place.
- Seeding staging accounts and test fixtures with unguessable values, so a demo environment never ships with something like changeme123 still in it.
Frequently Asked Questions
About This Tool
Password strength is measured in entropy: the number of bits of uncertainty an attacker has to work through. For a value picked uniformly at random, entropy is the length multiplied by the base-2 logarithm of the alphabet size. Sixteen characters drawn from the 62 letters and digits give about 95 bits; adding symbols widens the alphabet to 88 and raises that to roughly 103 bits. The randomness is what carries the weight, since a human-chosen password of the same length and alphabet is far weaker.
The length slider runs from 4 to 128 and starts at 16. Uppercase, lowercase and digits are on by default; the 26-character symbol set and the option to drop the ambiguous 0, O, l and 1 are off. Each character comes from a 32-bit value supplied by crypto.getRandomValues, the browser's cryptographically secure source, not Math.random. Generation happens on your device.
Notes & Limits
- Characters are drawn from one merged pool, so the output is not guaranteed to contain at least one of every set you enabled. A strict policy may reject it; regenerate.
- Each character maps a 32-bit value with a modulo, which is not a perfectly uniform draw. The resulting skew is under one part in a million and has no practical effect.
- Excluding the ambiguous 0, O, l and 1 shrinks the alphabet by four characters, costing roughly one to two bits of entropy at length 16. Add a character to compensate.
- The strength meter scores length thresholds and which character classes appear. It is not an entropy calculation and it never checks the result against breach lists.