🔐 Password Generator
Cryptographically secure passwords — generated locally in your browser
✓ Free Forever · ✓ No Signup · ✓ No Upload · ✓ Works Offline
🔒 Your data never leaves your device. All processing happens locally in your browser using Web Crypto API (crypto.getRandomValues). No upload, no server, no tracking.
Features
- Cryptographically Secure — Every character or word comes from crypto.getRandomValues(), the browser's cryptographically secure random generator (the kind used for encryption keys) — never Math.random(), and with no modulo bias.
- Customizable Rules — Random characters: length 8–128, upper/lowercase, numbers, symbols, no look-alikes — every set you tick appears at least once. Or a passphrase of 3–10 random words with the separator you like.
- Strength Meter — The entropy shown is counted exactly for the settings you picked (rounded down), with a rating from Weak to Very Strong.
- Fully Offline — Passwords are generated locally. Nothing is transmitted or stored.
How It Works
- Set your rules — Pick Random characters or Passphrase, then set the length (or the number of words) and the options.
- Generate passwords — Click Generate for one password or Generate 5 for a batch.
- Copy and use — Copy the password to your clipboard. Check the strength meter for security assurance.
Use Cases
- Create strong passwords for online accounts
- Generate API keys and secret tokens for development
- Bulk-generate temporary passwords for team onboarding
Frequently Asked Questions
How secure are the generated passwords?
They come from crypto.getRandomValues(), a cryptographically secure random generator: nobody can predict the next password from earlier ones. With all four character sets, 16 characters give 103 bits of entropy — at a trillion guesses a second, trying them all would take over 300 billion years. The bits on the page are counted exactly for your settings.
Passphrase or random characters?
A passphrase is easier to type and remember; random characters pack more strength into fewer characters. Each word from the 7,776-word list adds about 12.9 bits, so 5 words ≈ 64 bits and 8 words ≈ 103 bits — the same as 16 random characters. The words are English whatever language this page is in. Turn on Capitalize Words and Add a Number when a site insists on capitals and digits.
What does 'Exclude Ambiguous' do?
It removes characters that look similar: 0/O, 1/l/I. This prevents confusion when reading or typing passwords manually.
Are the passwords stored anywhere?
No. They're made in this tab and never sent anywhere; close it and they're gone. The page only remembers whether you last used characters or a passphrase. One thing to know: a password you copy sits on your clipboard like anything else you copy, and clipboard history (Windows Win+V, clipboard managers) may keep it — paste it into your password manager, then copy something else.
Notes from Milo 🐨
My own password guide told you to "switch to passphrase mode for 4–5 random words" — and there was no passphrase mode. There is now: pick Passphrase and you get 3–10 words drawn from the EFF's 7,776-word list, with your choice of separator, optional capitals and a digit for sites that insist. While I was checking the maths I found the entropy on screen was rounded up and slightly generous for short passwords (52 bits shown for what was really 50.6 at 8 characters), so the generator now draws every password evenly from all the ones that fit your rules and the number shown is exact, rounded down. If your browser blocks the clipboard, Copy now says so and selects the password instead of quietly doing nothing.
I tested this by generating a few hundred passwords, and about one in six came out with no number in it even though "Numbers" was ticked. That's the kind of password a sign-up form rejects with "must contain a digit". Now every box you tick is guaranteed to show up at least once, and the randomness comes from the same unbiased draw my raffle and dice tools use. On a phone, the Copy button also no longer sits on top of the last few characters.
From the blog
- 📖 How to Make a Strong Password (and Why Length Beats Symbols) — A strong password is mostly about length, not symbol-soup. Here's how entropy actually works, why passphrases win, and how to generate one privately.
Related Tools
- #️⃣ Hash Generator — Generate cryptographic hashes from text or files
- 🆔 UUID Generator — Generate universally unique identifiers — offline and secure
- Image to Base64 — Turn an image into a Base64 data URI, or encode and decode Base64 text — and turn Base64 back into a file
- 📡 Share Files Between Devices — Send files phone-to-PC — or anywhere — straight between two browsers. No upload, no account, no email. One device makes a code, the other joins, and the files fly device-to-device.
💬 Bug, idea, or just to say hi? Tell Milo 🐨 · [email protected]