Password Generator
Generate cryptographically strong passwords with adjustable length and character sets, ambiguous-character filter and entropy readout. Five candidates at a time, 100% offline.
Entropy math
Strength is estimated as length × log2(poolSize) bits — truly random selection from the enabled sets. Roughly: 40+ bits resists most casual attacks, 60+ bits is solid for online accounts, 90+ bits is overkill against offline cracking with current hardware. Because selection is uniformly random from a crypto RNG — not from a human “strong-looking” pattern — the estimate is trustworthy. The ambiguous filter removes look-alike characters (0 O 1 l I |) that cause transcription errors in person.
How to use Password Generator
Set your length, toggle character classes, then generate — each password comes from the browser's cryptographic random source, not the weaker Math.random fallback. Use the copy button to move results straight into your password manager, and generate a batch when you need several credentials at once.
The exclude look-alikes option is worth enabling when the password will be read aloud or typed from paper — ambiguous pairs like l/1 or 0/O vanish. Strength guidance is shown against the enabled character pool; passwords from this generator exist only in your browser until you copy them.
Frequently asked questions
How random are the generated passwords?
The generator uses the browser cryptographic random number generator (CSPRNG), which is cryptographically secure — far stronger than Math.random based generators found in older tools.
What length should I choose?
16 characters or more covers the entropy of nearly any service. For accounts you care about, 20 to 24 characters keeps brute force out of reach even against GPU clusters.
Why exclude look-alike characters?
Excluding 0, O, 1, l and I keeps passwords readable when typed by hand or read over a call. It slightly reduces entropy, so prefer a slightly longer length to compensate.
Are generated passwords sent anywhere?
No. Generation happens locally with no logs and no transmission. Nothing persists after closing the tab, so copying is the only way to keep a password.