Random Password Generator
Generate strong, unpredictable passwords in your browser using the system's cryptographic random source, with configurable length, character sets and a live entropy readout.
Random password generator
Uses the browser's cryptographic random generator (crypto.getRandomValues) with unbiased sampling. Generated passwords never leave this page.
About Random Password Generator
This generator builds every password from crypto.getRandomValues, the browser's cryptographically secure random number generator, rather than the predictable Math.random. It draws each character with unbiased rejection sampling, so a large character pool cannot skew the distribution the way a naive modulo would. The password is assembled entirely on the page and is never transmitted, logged or stored.
You control the shape of the output: choose a length from 6 to 64 characters and toggle lowercase letters, uppercase letters, digits and symbols independently. An option to skip look-alike characters - such as I, l, 1, O and 0 - produces passwords that are easier to read aloud and type without transcription errors, at a small reduction in the pool size.
As you change the settings the tool shows the resulting entropy in bits, calculated as the length multiplied by the base-2 logarithm of the pool size, and rates the strength. Entropy is the honest measure of how hard a password is to guess: each additional bit doubles the number of combinations an attacker must try. A long password drawn from a large pool quickly reaches strengths that are far beyond brute-force reach.
The most effective habit is a unique generated password for every account, kept in a password manager, with length doing more of the work than exotic symbols. Because generation happens client-side, you can create credentials on an offline or air-gapped machine and be confident they were never seen by any server or third party.
How to use it
- 1Drag the length slider to your target; 20 or more characters is a strong default.
- 2Toggle the lowercase, uppercase, digit and symbol sets you want to include.
- 3Optionally enable Skip look-alikes to avoid easily confused characters like I, l, 1, O and 0.
- 4Check the entropy estimate, then select Generate password and copy the result.
Common use cases
- -Create a unique, high-entropy password for a new account or service.
- -Generate credentials that satisfy a specific policy for length and required character classes.
- -Produce readable passwords with no look-alike characters for cases that must be typed or dictated.
- -Generate unpredictable strings to use as API keys, tokens or seed values.
- -Create passwords on an offline or air-gapped machine without trusting any server.
Frequently asked questions
- Are these passwords generated securely?
- Yes. Each password is built with crypto.getRandomValues, the browser's cryptographically secure random generator, using unbiased rejection sampling so every character in the pool is equally likely.
- Are the generated passwords sent anywhere?
- No. Generation happens entirely in your browser and the passwords never leave the page, so they are not transmitted, logged or stored anywhere.
- How long should a password be?
- Length matters more than complexity; a random password of 16 or more characters from a mixed pool typically exceeds the entropy needed to resist brute-force attacks. The tool shows the entropy in bits so you can judge each configuration.
- What is password entropy?
- Entropy measures unpredictability in bits - the password length times the base-2 logarithm of the character-pool size. Each extra bit doubles the number of guesses an attacker needs, so higher entropy means a stronger password.
- What does 'skip look-alike characters' do?
- It removes easily confused characters such as I, l, 1, O and 0 from the pool, producing passwords that are simpler to read and type at a slight reduction in entropy.
- Can I use the generator offline?
- Yes. Because everything runs client-side, once the page has loaded it generates passwords locally with no network connection required.