Password Generator
Generate strong, random passwords with a strength meter (crypto-secure).
Passwords are generated locally in your browser and nothing is uploaded; still, treat any generated value as a real secret and avoid pasting or reusing real production passwords without storing them securely.
Need authenticator codes? Try the TOTP / 2FA Generator.
About Password Generator
This password generator creates strong, random passwords using your browser's cryptographically secure random source, so every result is unpredictable rather than seeded from a weak pseudo-random function. Use it as a random password generator when signing up for a new service, rotating credentials, or seeding a password manager, and tune the length and character mix to match a site's rules. You can toggle lowercase, uppercase, numbers, and symbols, exclude look-alike characters like l, I, 1, O, and 0, and watch a live strength meter estimate the entropy in bits. It's built for developers, QA engineers, sysadmins, and anyone who needs a secure password fast. Everything is processed locally in your browser and nothing is uploaded to a server.
Features
- Generates passwords with a cryptographically secure random source (crypto.getRandomValues)
- Adjustable length from 4 to 64 characters via a slider
- Toggle lowercase, uppercase, numbers, and symbols independently
- Exclude look-alike characters (l, I, 1, O, 0, o) to avoid misreads
- Guarantees at least one character from each selected set
- Live strength meter showing Weak to Very strong plus estimated entropy bits
- One-click Regenerate and Copy buttons
How to use the Password Generator
- Drag the Length slider to set how many characters you want.
- Toggle Lowercase, Uppercase, Numbers, and Symbols to choose the character mix.
- Optionally enable Exclude look-alikes to drop ambiguous characters.
- Check the strength meter, then click Regenerate for a fresh password.
- Click the copy button to copy the password to your clipboard.
Example
Input
Length 16, lowercase + uppercase + numbers + symbols enabled
Output
q8R#tLm2!vXz4Pw@
A 16-character password drawing from all four character sets.
Common errors & troubleshooting
- The output is blank and an error says to select at least one character type. — Enable at least one of Lowercase, Uppercase, Numbers, or Symbols so the generator has characters to draw from.
- A site rejects the password because it contains symbols. — Turn off the Symbols toggle to produce an alphanumeric-only password that passes stricter input rules.
- The password is hard to read or type by hand. — Enable Exclude look-alikes to remove ambiguous characters like l, I, 1, O, and 0.
- The strength meter shows Weak even with all sets on. — Increase the length; entropy scales with length, so a longer password quickly reaches Strong or Very strong.
Frequently asked questions
- What is a password generator and why use one?
- A password generator creates random, hard-to-guess passwords for you so you never reuse a weak phrase. This password generator draws each character from a cryptographically secure source, producing credentials far stronger than anything you would invent by hand.
- How random are the passwords from this password generator?
- Each character is chosen with the browser's crypto.getRandomValues using rejection sampling for an unbiased result, so the output is cryptographically secure rather than a weak pseudo-random sequence.
- How do I create a strong password with the right length?
- Aim for at least 16 characters with a mix of character types. The strength meter shows estimated entropy bits, and reaching about 80 bits or more is rated Very strong.
- Can I generate a password without symbols?
- Yes. Turn off the Symbols toggle to get an alphanumeric password, which is useful for sites that reject special characters.
- What does Exclude look-alikes do?
- It removes ambiguous characters such as l, I, 1, O, 0, and o so the password is easier to read and type without confusing similar-looking glyphs.
- Are passwords from this generator ever sent anywhere?
- No. The password generator runs entirely in your browser, every password is created locally, and your data never leaves your device.
Related tools
- TOTP / 2FA Generator — Generate time-based one-time passwords (2FA codes) from a base32 secret.
- JWT Decoder — Decode JWT header & payload and inspect exp / iat (no verification).
- JWT Signer — Create and sign a JWT (HS256/384/512) from a payload and secret — Web Crypto.
- Hash Generator — SHA-256 / SHA-1 / SHA-384 / SHA-512 via the Web Crypto API.
- UUID Generator — Generate one or many random UUID v4 values.
- Base64 Encode / Decode — UTF-8 safe Base64 encoding and decoding.
- Mock Data Generator — Generate fake JSON data — names, emails, UUIDs, dates and more.
All ArrayKit tools