Password Generator
Generate a genuinely random password, entirely in your browser.
How this works
Each character is drawn from your chosen alphabet using crypto.getRandomValues — the browser’s cryptographic randomness — not the predictable Math.random. The selection uses rejection sampling so every character is equally likely, which keeps the entropy exactly what the length and alphabet imply.
What the results mean
- Entropy
- Bits of genuine randomness. Because the password is random, this figure is exact rather than an estimate — unlike a password you invent, where patterns cut the real strength well below the apparent one.
- Alphabet size
- How many characters each position is drawn from. A larger alphabet raises entropy, but length raises it faster.
- Avoid look-alikes
- Drops 0/O and 1/l/I so the password can be read aloud or copied by hand without ambiguity. It slightly lowers the alphabet size.
Frequently asked questions
Is this password really random?
Yes. It uses the Web Crypto API, which is designed for cryptographic use, rather than Math.random, which is predictable and must never be used for secrets. You can confirm in your network panel that nothing is transmitted — the randomness is entirely local.
Longer password or more symbols?
Longer, almost always. Adding four characters to the length increases strength far more than adding symbols to a short one, and a longer password made of letters is easier to handle than a short dense one.
Do you keep a copy?
No. It is generated in your browser, never sent anywhere, and deliberately excluded from anything you can export. Close the tab and it is gone.