Secure Password Generator

Client-only generation using Web Crypto. No network calls. Nothing stored. No logs.

Options

Length: 24

Include lowercase (a-z)

Include uppercase (A-Z)

Include digits (0-9)

Include symbols

Require at least one from each selected set

Avoid ambiguous look-alikes (O, 0, l, 1, |)

Exclude specific characters (optional)

How many to generate

Tip: longer is better. 24+ characters with letters + digits is very strong. Symbols help; length dominates.

Result

Estimated strength

—

Entropy: 0 bits

Charset size: 0

Batch

Privacy & security

Generated entirely in your browser via window.crypto.getRandomValues. This page makes no network requests, stores nothing, and does not log. Reloading clears everything.

How it works

Characters are chosen uniformly using rejection sampling to eliminate modulo bias. If “Require at least one from each set” is on, the generator commits one char from each selected set, fills the remainder from the full charset, then shuffles with Fisher–Yates using cryptographic randomness. Entropy is estimated as L × log₂(N) bits, where L is length and N is the size of the final charset.

Best practice: use a unique password per site and store in a password manager. Favor length: 20–32+ for accounts; 40–64+ for secrets/keys.