Password Generator

Generate secure passwords in your browser (using crypto.getRandomValues, nothing is sent to a server). Create random strings, memorable passphrases or PINs, with a spell-out table for reading passwords over the phone or writing them down.

✨ Features

  • Cryptographically secure randomness (crypto.getRandomValues) with modulo-bias rejection — truly random passwords
  • A spell-out table renders each character as “capital A — Alfa”, preventing 0/O and 1/l/I mix-ups on the phone or on paper
  • Three modes — random string, memorable passphrase and PIN — with honest entropy (bits) and brute-force time estimates
  • Everything runs in your browser. Generated passwords are never sent anywhere and never stored

🪄 When is this useful?

Signing up for a new account

Generate a unique, strong password on the spot. Options for length and symbol sets handle sites with strict password rules.

Sharing with family or colleagues

When telling someone a Wi-Fi password over the phone, the spell-out table lets you say “capital A — Alfa, digit zero” without mistakes.

Passwords you must remember

For logins you type every day, a passphrase of random words keeps the strength while staying memorable.

Test data for development

Use bulk generation to create a batch of initial passwords for test accounts in one click.

🔒 Privacy

Generation happens entirely in your browser's JavaScript; passwords are never transmitted to any server. Only your generation settings are stored locally — the generated passwords themselves are never saved.

❓ FAQ

Can my generated password leak?

No. Generation uses the cryptographically secure crypto.getRandomValues API and completes entirely in your browser, with no network transmission and no storage. The page source is public, so you can verify that no requests are made.

How long should my password be?

Current guidance recommends 16+ characters including digits and symbols. This tool labels 80+ bits of entropy as “Very strong”, a level where brute force is impractical. For important accounts, 20+ characters is a good choice.

Are passphrases weaker than random strings?

Not if you use enough words. Strength is words × log2(vocabulary size), which is exactly what this tool displays. A 6–7 word passphrase rivals a 16-character random string — and you can actually remember it.

Does excluding ambiguous characters weaken the password?

Only slightly (the pool shrinks by a few characters), and the displayed entropy is computed from the reduced pool, so it stays accurate. For passwords that will be typed by hand or read aloud, avoiding mistakes usually outweighs the tiny loss.

🔗 Related tools

Strength

Generate in bulk

    Contact