Free tool

Cryptographically secure passwords

Generate strong random passwords using your browser's Web Crypto API (crypto.getRandomValues). All generation happens locally — nothing is sent anywhere.

How it works

Passwords are generated using crypto.getRandomValues, the same cryptographic random number source used by your browser for SSL. This is not Math.random() — it is genuinely secure.

The generator also guarantees at least one character from each active character set, then shuffles the result using Fisher-Yates to avoid any positional bias.

Settings

SettingOptions
Length4–64 characters. Quick presets: 8, 12, 16, 24, 32.
UppercaseA–Z
Lowercasea–z
Numbers0–9
Symbols! @ # $ % ^ & * and more
Exclude ambiguousRemoves 0, O, 1, l, I

Quick presets

PresetLengthCharacter sets
Strong16All types
Memorable12Upper + lower + numbers, no symbols, no ambiguous
PIN6Numbers only
Max security32All types

Keyboard shortcuts

ShortcutAction
Space or RGenerate new password (when not in input)
Ctrl/Cmd + CCopy password (when not in input)

Strength meter

Strength is measured by entropy bits — calculated as length × log₂(pool size). Higher entropy means harder to brute-force.

LevelEntropy
WeakBelow 28 bits
Fair28–36 bits
Good36–60 bits
Strong60–80 bits
Very Strong80+ bits