Password generator
Generated in your browser with cryptographic randomness. Never sent anywhere.
20
Generated in your browser with cryptographic randomness. Never sent anywhere.
Every password on this page comes from crypto.getRandomValues, the browser's
cryptographically secure random source — the same primitive password managers use. Indices are
drawn with rejection sampling, so every character in the alphabet is exactly equally likely
(naive random % length implementations skew toward the start of the alphabet).
Nothing is stored and nothing is transmitted. The page works offline once loaded — cut your network connection and it keeps generating.
Here, yes — the password is generated in your browser with the Web Crypto API and never sent anywhere. Open your browser devtools network tab and generate as many as you like: no requests leave the page.
Strength is measured in bits of entropy: length × log2(alphabet size). Every extra character multiplies the search space; 80+ bits is strong for any account, 128 bits is effectively uncrackable.
Ambiguous glyphs (lowercase l, digit 1, capital I, capital O, digit 0) are excluded so passwords survive being read aloud or retyped from paper.