Overview
Most passwords fail for a boring reason: a human invented them. People reach for pets, birthdays, teams and keyboard patterns, and cracking software knows those habits intimately. A generator removes the human from the loop: this tool assembles your password from characters drawn by your browser's cryptographic random number generator, so the result carries no pattern and no personal meaning an attacker could exploit.
You stay in control of the recipe. Set the length with the slider, decide which families of characters may appear, and optionally strip out the symbols that are easy to misread when you type a password by hand. The entropy readout updates as you work, so you can watch the trade-off between length and variety instead of guessing at it.
What is a random password?
A random password is a string in which every character was chosen independently, with no rule connecting one character to the next. That independence is the whole point. If a password is sixteen characters pulled from a pool of about eighty symbols, the number of possible combinations is astronomically large, and the only honest way to find the right one is to try them all — a task that stays out of reach even for well-funded attackers when the entropy is high enough.
Entropy is the score this page shows you. It is a simple piece of arithmetic: the length of the password multiplied by the logarithm of the pool size. Roughly speaking, anything under 40 bits falls quickly, 40 to 60 bits is fair for low-value accounts, 60 to 80 bits is strong, and beyond 80 bits a password is very strong for ordinary use. Length moves that number far faster than exotic symbols do, which is why the slider goes all the way to 128.
Features
- Length from 4 to 128 characters, set by slider or by typing an exact number — the two controls always agree with each other.
- Four independent character sets covering capitals, small letters, digits and a broad symbol set, each switched on or off separately.
- Look-alike filter that removes zero, capital O, small o, one, small L, capital I and the pipe sign, for passwords you may have to read aloud or copy from paper.
- A guaranteed character from every selected set, placed at a random position, so a site that demands a digit and a symbol accepts your password first time.
- Cryptographic randomness with rejection sampling, so characters are drawn evenly and no symbol turns up more often than the others.
- Live entropy score and meter that respond to every change, labelled weak, fair, strong or very strong.
- Instant regeneration — there is no submit button to forget; touch any control and a fresh password appears.
- One-click copying with a short confirmation, so you know the password actually reached your clipboard.
Benefits
- Nothing to leak. Generation happens on your device, so there is no account database, no history file and no server log containing your new password.
- No sign-up and no limits. Make one password or fifty, for yourself or for a whole team being onboarded.
- Better habits by default. Seeing the entropy move teaches you to judge a password by its length rather than by how many symbols were sprinkled on top.
- Works without a connection. Once the page is open, you can go offline and keep generating.
Who can use it
Anyone setting up a new account, replacing a password that appeared in a data breach, or retiring an old favourite that has been reused across too many sites. It is just as handy for the person issuing credentials to others: a developer spinning up test accounts, an administrator handing a temporary login to a colleague, or a support agent resetting access for a customer. If a password needs to exist and nobody should be able to guess it, this is the quick way to make one.
How to use
- Choose the length first. Sixteen characters is a sensible everyday default; go to twenty or beyond for email, banking and your password manager itself.
- Tick the character sets you want. If a website forbids symbols, switch them off and add a few extra characters instead — the entropy readout shows exactly what that swap costs or gains.
- Turn on the look-alike filter if there is any chance you will type the password manually or read it over the phone.
- Check the strength label, then press Copy password and paste the result straight into the account or your password manager.
- Want a different roll of the dice? Press New password — every generation is a fresh, independent draw.
Frequently asked questions
Is it safe to create a password on a web page?
On this page, yes, because the work never leaves your machine. The generator uses your browser's built-in cryptographic random source and the finished password exists only on your screen until you copy it. Reloading the page discards it completely. You can verify the claim by loading the page, disconnecting from the internet, and generating away.
How long should my password be?
Sixteen characters drawn from letters and digits is comfortably strong for a normal account. Use twenty or more for anything that guards money, your main email inbox, or the master password of a password manager, because those accounts can be used to reset everything else.
Do symbols actually matter?
Symbols widen the pool, which helps, but length helps more for the same effort. A twenty-character password of letters and digits alone is stronger than a twelve-character one decorated with symbols. Add symbols when a site allows them, but never trade length away to get them.
Why exclude look-alike characters?
Some characters are easy to confuse on paper or a blurry screen: zero and capital O, one and small L, capital I and the pipe sign. Removing them slightly shrinks the pool, yet greatly improves your odds of typing the password correctly first time.
Does the tool remember the passwords it makes?
No. There is no storage involved at all: nothing is written to your browser's storage, and nothing is transmitted. If you close the tab before copying, that password is gone for good, which is exactly how a generator should behave.
Can I use the same generated password on several sites?
Please do not. Reuse is the habit that turns one breached website into a skeleton key for your whole online life, because attackers test leaked credentials everywhere automatically. Generate a fresh password per account and let a password manager keep the list.
Conclusion
A good password is long, random and used in exactly one place. This tool handles the first two qualities in seconds; the third is a promise only you can keep. Pick a generous length, copy the result into a password manager, and move on with your day.