Password Generator
Web CryptoGenerate cryptographically secure random passwords and memorable passphrases with entropy analysis.
Results
No Passwords Generated
Click Generate Passwords to produce secure keys
About Password Generator
Pick a length from 4 to 64 characters and choose which character sets to include: uppercase, lowercase, digits, and symbols. You can also exclude ambiguous characters like 0, O, 1, l, I, and | so printed or shared passwords are easier to read.
For memorable credentials, switch to passphrase mode. The generator combines 3 to 6 common words with a separator of your choice, with optional capitalization and an appended number - the approach recommended by password standards like the EFF word list and NIST guidance.
Every generation uses the browser's cryptographically secure random number generator. Passwords are created locally and never transmitted, logged, or stored anywhere.
Features & Highlights
- Random passwords from 4 to 64 characters
- Uppercase, lowercase, digit, and symbol sets
- Ambiguous character exclusion (0 O 1 l I |)
- Memorable passphrase mode with 3-6 words
- Custom separators, capitalization, and digit suffix
- Entropy estimate with strength meter for each result
- 5 candidates per batch with one-click copy
Password Generator FAQ
Find answers to common questions about generating strong passwords, using passphrases, and keeping accounts safe.
How strong should my password be?
Aim for at least 16 characters mixing uppercase, lowercase, digits, and symbols - roughly 90+ bits of entropy. The strength meter estimates entropy from length and character variety.
What is a passphrase and why use one?
A passphrase is a sequence of random words, like 'Canyon-Mosaic-Lantern-42'. It is easier to remember and type than a random string while providing comparable strength - the approach recommended by the EFF and NIST.
Are generated passwords truly random?
Yes. The generator uses the browser's cryptographically secure random number generator (crypto.getRandomValues), the same source used for TLS keys, with rejection sampling to avoid bias.
Is my password sent anywhere?
No. Passwords are generated locally in your browser and are never transmitted, logged, or stored. The tool cannot see or retain what you generate.
What characters are ambiguous?
Ambiguous characters look similar in many fonts: 0 and O, 1 and l, and I and |. Excluding them makes passwords easier to read aloud, print, or type on a phone.
Should I use a password manager instead?
Yes - use a password manager to store generated passwords. This generator is ideal for creating credentials that then live safely in your manager or device keychain.