Password Generator

Generate cryptographically secure passwords with strength and crack-time estimates.

100% client-side Instant results Free forever Nothing uploaded

About the Password Generator

Generate truly random passwords using the Web Crypto API — not the weak Math.random(). Control length (8–128) and character sets, exclude ambiguous characters, and see live entropy bits and estimated crack time for every password.

Generation happens locally and passwords are never transmitted or stored — safer than any server-based generator can possibly be.

How to use the Password Generator

  1. Set your desired length and character types.
  2. Click "Generate" — entropy and crack-time update instantly.
  3. Copy the password (and generate a few spares).

Common uses

Creating strong account passwords Generating API keys and secrets Setting up new devices and routers

Frequently asked questions

How long should a password be?
16+ characters with mixed character sets is strong for most uses; use a unique password per site with a password manager.
How is crack time estimated?
From entropy: charset-size^length guesses, assuming 10 billion guesses/second offline — a conservative attacker model.
Is this safer than online generators that use a server?
Yes — nothing leaves your device. Server-based generators require you to trust their logging and transport.
What does "exclude ambiguous" do?
Removes look-alike characters (0/O, 1/l/I) so passwords are easier to type and read aloud.

Related tools