Online Tool Store
Password Generator
Generate strong, random passwords with control over length, uppercase, lowercase, numbers, and symbols, plus a strength estimate. Runs entirely in your browser.
This works right here on your device — nothing gets sent out.
How it works
- Choose Password or Passphrase.
- For a password, pick a length and which character types to include — uppercase, lowercase, numbers, and symbols. For a passphrase, pick the number of words and a separator.
- Each character or word is chosen independently using your browser's cryptographically secure random number generator.
- Check the strength meter, then copy the result, or click ↻ to generate a new one with the same settings.
How strength is measured
Strength is estimated as information entropy — the number of bits of randomness in the password:
password: entropy = log2(character set size) × length
passphrase: entropy = words × log2(7,776) ≈ words × 12.92
Example: a 16-character password using all four character types draws from a set of 87 characters, giving log2(87) × 16 ≈ 103 bits — rated "Very strong." The same length using only lowercase letters draws from 26 characters, giving log2(26) × 16 ≈ 75 bits — rated "Strong," despite being the same length. A 6-word passphrase is 6 × 12.92 ≈ 77 bits. When "Include at least one of each selected type" is on, the tool counts exactly how many passwords satisfy the rule instead of using the simple formula, so the figure is never overstated. Ratings: under 40 bits Weak, 40–59 Fair, 60–79 Strong, 80 or more Very strong.
FAQ
Are the passwords sent anywhere, or logged?
No. Every password is generated locally using your browser's crypto.getRandomValues() API — nothing is uploaded, logged, or ever leaves your device. Passphrase mode downloads the public word list once, but your passphrase itself is built on your device.
Is this safe enough for real accounts?
Yes — it uses crypto.getRandomValues(), the same cryptographically secure random number source browsers use for things like generating encryption keys, not Math.random(), which is not safe for anything security-sensitive. Each character or word is picked with rejection sampling, so no character is even slightly more likely than another.
What is a passphrase, and is it as strong as a password?
A passphrase is several randomly chosen words, such as "abacus-tidal-plank-velvet". Each word from the 7,776-word EFF list adds about 12.9 bits, so 6 words is about 77 bits — comparable to a 12-character random password that mixes uppercase, lowercase, numbers and symbols — and it is much easier to type and remember. Words must be picked at random, not by you.
Why does a 12-character password rate lower than a 16-character one?
Strength is based on entropy (bits of randomness), which depends on both length and which character types are included. A 12-character password using only lowercase letters has about 56 bits (Fair), while 12 characters mixing all four types has about 77 bits (Strong), and 16 characters mixing all four types has about 103 bits (Very strong).
What does "Include at least one of each selected type" do?
Many sites require at least one uppercase letter, number and symbol. With this option on, the tool redraws until every type you selected appears, so every acceptable password is still equally likely. It removes a few bits of entropy at short lengths (about 4 bits at 4 characters, under 0.3 bits at 16), and the strength meter shows the exact figure.
What does "Exclude ambiguous characters" do?
It removes characters that are easy to misread or mistype when copying a password by hand — l, 1, I, O, and 0. Leave it off if you always copy-paste rather than retype.
Will the same options always produce the same password?
No — every character is chosen independently using a secure random source, so two passwords generated with identical settings will still come out different.
How we compare
| Feature | Online Tool Store | Bitwarden | Keeper | Proton Pass |
|---|---|---|---|---|
| Random passwords with adjustable length and character types | ✓ | ✓ | ✓ | ✓ |
| Passphrase mode with word count, separator and capitalization | ✓ | ✓ | ✓ | Passphrase option; word settings not listed |
| Strength shown live | Yes, in bits of entropy | Yes, with crack-time estimates | Yes, visual indicator | Yes, with a crack-time estimate |
| Exclude ambiguous characters option | ✓ | Not listed on the page | Not listed on the page | Not listed on the page |
| At least one of each selected type, with exact entropy | ✓ | Not listed on the page | Not listed on the page | Not listed on the page |
| No account needed | ✓ | No account for basic use | No account needed | Not stated on the page |
Bitwarden, Keeper and Proton Pass are all good generators, and Bitwarden also lets you save passwords to a free account, which this tool deliberately doesn't offer. Choose Password Generator when you want a strong password or passphrase without an account or extension, with the entropy shown in bits and the option to avoid characters that are easy to misread.