Generate strong, random passwords with a strength meter using crypto-secure randomness, right in your browser.
Password Generator Online
Generate strong, random passwords with a strength meter using crypto-secure randomness, right in your browser.
Passwords are generated locally in your browser and nothing is uploaded; still, treat any generated value as a real secret and avoid pasting or reusing real production passwords without storing them securely.
This password generator creates strong, random passwords using your browser's cryptographically secure random source, so every result is unpredictable rather than seeded from a weak pseudo-random function. Use it as a random password generator when signing up for a new service, rotating credentials, or seeding a password manager, and tune the length and character mix to match a site's rules. You can toggle lowercase, uppercase, numbers, and symbols, exclude look-alike characters like l, I, 1, O, and 0, and watch a live strength meter estimate the entropy in bits. It's built for developers, QA engineers, sysadmins, and anyone who needs a secure password fast. Everything is processed locally in your browser and nothing is uploaded to a server.
Features
Generates passwords with a cryptographically secure random source (crypto.getRandomValues)
Adjustable length from 4 to 64 characters via a slider
Toggle lowercase, uppercase, numbers, and symbols independently
Exclude look-alike characters (l, I, 1, O, 0, o) to avoid misreads
Guarantees at least one character from each selected set
Live strength meter showing Weak to Very strong plus estimated entropy bits
One-click Regenerate and Copy buttons
How to use the Password Generator
Drag the Length slider to set how many characters you want.
Toggle Lowercase, Uppercase, Numbers, and Symbols to choose the character mix.
Optionally enable Exclude look-alikes to drop ambiguous characters.
Check the strength meter, then click Regenerate for a fresh password.
Click the copy button to copy the password to your clipboard.
A 16-character password drawing from all four character sets.
Common errors & troubleshooting
The output is blank and an error says to select at least one character type. — Enable at least one of Lowercase, Uppercase, Numbers, or Symbols so the generator has characters to draw from.
A site rejects the password because it contains symbols. — Turn off the Symbols toggle to produce an alphanumeric-only password that passes stricter input rules.
The password is hard to read or type by hand. — Enable Exclude look-alikes to remove ambiguous characters like l, I, 1, O, and 0.
The strength meter shows Weak even with all sets on. — Increase the length; entropy scales with length, so a longer password quickly reaches Strong or Very strong.
Frequently asked questions
What is a password generator and why use one?
A password generator creates random, hard-to-guess passwords for you so you never reuse a weak phrase. This password generator draws each character from a cryptographically secure source, producing credentials far stronger than anything you would invent by hand.
How random are the passwords from this password generator?
Each character is chosen with the browser's crypto.getRandomValues using rejection sampling for an unbiased result, so the output is cryptographically secure rather than a weak pseudo-random sequence.
How do I create a strong password with the right length?
Aim for at least 16 characters with a mix of character types. The strength meter shows estimated entropy bits, and reaching about 80 bits or more is rated Very strong.
Can I generate a password without symbols?
Yes. Turn off the Symbols toggle to get an alphanumeric password, which is useful for sites that reject special characters.
What does Exclude look-alikes do?
It removes ambiguous characters such as l, I, 1, O, 0, and o so the password is easier to read and type without confusing similar-looking glyphs.
Are passwords from this generator ever sent anywhere?
No. The password generator runs entirely in your browser, every password is created locally, and your data never leaves your device.
Related tools
TOTP / 2FA Generator — Generate time-based one-time passwords (2FA codes) from a base32 secret.
JWT Decoder — Decode JWT header & payload and inspect exp / iat (no verification).
JWT Signer — Create and sign a JWT (HS256/384/512) from a payload and secret — Web Crypto.
Hash Generator — SHA-256 / SHA-1 / SHA-384 / SHA-512 via the Web Crypto API.
UUID Generator — Generate up to 1,000 UUIDs at once: random v4, time-ordered v7 or the NIL UUID.
SSH Key Generator — Generate Ed25519, RSA or ECDSA SSH keypairs in your browser and download the public and private keys.
PPK ↔ PEM Converter — Convert SSH private keys between PuTTY .ppk and OpenSSH/PEM (RSA & Ed25519) — locally in your browser.
TOTP / 2FA Generator — Generate time-based one-time passwords (2FA codes) from a base32 secret.
JWT Signer — Create and sign a JWT (HS256/384/512) from a payload and secret — Web Crypto.
Basic Auth Generator — Generate and decode HTTP Basic Auth Authorization headers from a username and password.
Certificate & Private Key Matcher — Confirm an X.509 certificate or CSR and a private key belong together (the classic modulus mismatch check) — locally in your browser.
PFX to PEM Extractor — Open a password-protected .pfx/.p12 file and split it into certificate, chain, and private-key PEM blocks.
Bcrypt Generator — Hash a password with bcrypt and verify a password against a bcrypt hash, in your browser.
HMAC Generator — Generate an HMAC (SHA-256, SHA-1, SHA-512) from a message and secret key using Web Crypto.
Password Strength Checker — Check password strength with entropy, character-set and common-pattern analysis, in your browser.
X.509 Certificate Decoder — Decode a PEM or DER certificate to view subject, issuer, validity, SANs and fingerprints.
Diceware Passphrase Generator — Generate a memorable, high-entropy passphrase from the EFF word list, in your browser.