Password Generator
Generate strong random passwords in your browser using the Web Crypto API, with an entropy rating. Nothing is transmitted.
Create strong random passwords in your browser. Nothing is sent anywhere.
Strength
Strong
126 bits of entropy from a 79-character set.
Generating...About the password generator
Password strength is measured in entropy bits, which is length multiplied by the log of the character set size. Length beats complexity: a twenty character lowercase password is stronger than a ten character one with every symbol type.
Randomness comes from crypto.getRandomValues, not Math.random, which is not suitable for anything security related. Generation happens entirely in your browser.
How to use it
- 1Set the length. Sixteen is a reasonable floor, twenty or more is better.
- 2Choose which character sets to include.
- 3Turn on lookalike filtering if the password will be typed by hand or read aloud.
- 4Read the entropy rating.
- 5Change the Regenerate number for a fresh batch.
Questions
Are these passwords sent anywhere?
No. They are generated in your browser with the Web Crypto API and never leave the page. Nothing is logged.
How long should a password be?
At least sixteen characters for anything that matters. Length contributes more to entropy than adding symbol types does.
What is the lookalike filter?
It removes characters that are easily confused, such as O and 0 or l and 1. Useful when the password will be typed manually or dictated.