Password Generator
A Password Generator creates cryptographically random passwords of configurable length and character set — using the browser's crypto.getRandomValues so no generated password is ever transmitted, logged, or seen by a server.
—Passwords are sampled from crypto.getRandomValues and never leave your browser.
About Password Generator
Choose length and character classes (uppercase, lowercase, digits, symbols), optionally exclude ambiguous characters like 0/O and 1/l, and generate a password instantly. Each password is built from values pulled out of crypto.getRandomValues, the Web Crypto API's CSPRNG. The strength meter estimates entropy in bits and tells you how this compares to common attack timelines.
What Password Generator does
- Configurable length from 4 to 128 characters
- Toggle uppercase, lowercase, digits, and symbols independently
- Optional exclusion of ambiguous characters (0/O, 1/l, |)
- Live entropy meter showing bits and brute-force timeline
- Sourced from crypto.getRandomValues (Web Crypto CSPRNG)
- Generated passwords never leave the browser — verifiable in DevTools
When to reach for Password Generator
- Creating a one-off password to paste straight into a password manager
- Generating a rotation password for a service account
- Producing a short PIN for a low-value internal system
- Bulk-generating throwaway test credentials for a staging environment
How to use Password Generator
- 01
Pick length
Drag the length slider — 16 characters is a sensible minimum.
- 02
Choose character classes
Toggle uppercase, lowercase, digits, and symbols. Exclude ambiguous characters if the password is going to be typed manually.
- 03
Copy or regenerate
Click Copy to put it on your clipboard, or hit Regenerate to spin a new one.
When to use Password Generator vs alternatives
| Alternative | Use Password Generator when… | Use the alternative when… |
|---|---|---|
| Your password manager's built-in generator | you want a quick browser-tab generator without opening the manager UI. | you want the password stored directly in your vault on generation. |
| `openssl rand -base64 24` in the terminal | you want a live entropy meter and visual character-class controls. | you are scripting. |
Frequently asked questions
Is it safe to generate passwords on a website?
How long should my password be?
What does the entropy bits number mean?
Should I use a passphrase instead?
Related tools
Related reading
Privacy · 12 min read
Which AI coding tools train on your code? A 2026 privacy guide
Whether an AI coding assistant trains on your code or keeps it private usually comes down to one thing: your subscription tier, not the tool. Here's a current, tier-by-tier breakdown of what GitHub Copilot, Cursor, Claude Code, ChatGPT and Gemini actually do with the code you send them — how to lock each one down, and when the only real guarantee is a local model.
Security · 10 min read
Vibe coding safely: shipping an AI-built app without leaking secrets or bugs
Vibe coding — describing what you want and letting an AI write most of the code — is a genuinely fast way to build. It is also a fast way to leak API keys, install a hallucinated package, and ship an app you do not understand well enough to secure. Here is a practical threat model and a safe workflow that keeps the speed without the accidents.