Skip to content
Page Utils

Password Generator

A password generator online builds strong random passwords in your browser. Set the length slider (8–128), toggle uppercase, lowercase, digits, and symbols, optionally exclude ambiguous characters, then Generate and Copy. Picks use crypto.getRandomValues with rejection sampling, so every character is unbiased. Nothing is stored or uploaded.

Updated

Each character is drawn from the pool you select with the Web Crypto random source (crypto.getRandomValues) and rejection sampling — no Math.random and no modulo bias. With all four types on and length 20, the pool is 89 characters, so one password carries about 20 × log2(89) ≈ 130 bits of entropy. The strength meter shows that same length × log2(pool) estimate for whatever you pick.

Passwords live only in this tab's memory. We do not write them to localStorage, do not post them to Page Utils, and do not show ads on this page. Paste the one you keep straight into a password manager, then close the tab. This page generates random strings — it does not check whether an existing password has leaked and it does not store a vault.

Password workspace

crypto.getRandomValues

8 to 128 characters. 16+ is a sensible floor for accounts; 20+ for anything you store in a manager.

Characters

1 to 50 passwords, one per line.

Strength

Very strong · ≈130 bits (20 × log2 89)

Output

  • Passwords appear here in the browser after the page loads.

How does the Password Generator work?

  1. 1. Set the length

    Drag the length slider between 8 and 128 characters. 16 is a sensible floor for an account password; 20 or more for anything you keep in a password manager.

  2. 2. Choose character types

    Toggle uppercase, lowercase, digits, and symbols. Tick Exclude ambiguous to drop 0 O o 1 l I | when a password will be read aloud or typed from paper. Keep At least one of each selected type on for sites with composition rules.

  3. 3. Generate in the browser

    Pick how many passwords you want (1–50) and press Generate. Each character comes from crypto.getRandomValues with rejection sampling. The strength meter shows the entropy estimate in bits.

  4. 4. Copy one and close the tab

    Copy a single password or Copy all. Save the one you use in your password manager, then close the tab — nothing is written to localStorage or uploaded.

Questions about Password Generator

Is this password generator online safe to use?
Yes, in the sense that generation happens entirely in your browser tab. The page uses crypto.getRandomValues, the same cryptographically secure random source browsers use for keys. Passwords are kept in memory only — never written to localStorage, never posted to Page Utils, and never logged. The page is ad-light: it has no advertisement slot.
How random are the passwords?
Each character is chosen with crypto.getRandomValues and rejection sampling: random 32-bit values that would cause modulo bias are thrown away and redrawn, so every character in the pool is equally likely. Math.random is not used anywhere in the generator.
How long should a strong password be?
For a randomly generated password, 16 characters with all four character types is about 104 bits of entropy, which is far beyond practical brute force. Use 20 or more for master-style secrets you keep in a manager. Length adds more strength than extra symbols, so raise the slider before worrying about special characters.
What does the strength meter measure?
It shows an entropy estimate: length × log2(pool size), in bits. With 26 lowercase letters only, each character adds about 4.7 bits; with all 89 characters, about 6.48 bits. The estimate assumes a random draw like this page makes — it does not grade a password you invented yourself.
What are ambiguous characters?
Characters that are easy to confuse when reading or typing: zero 0, capital O, lowercase o, one 1, lowercase l, capital I, and the pipe |. Exclude ambiguous removes them from the pool, which costs a little entropy per character, so add one or two characters of length to compensate.
Why keep At least one of each selected type on?
Many sign-up forms reject passwords missing a digit or symbol. With the option on, the generator redraws the whole password until every selected type appears, so the result stays uniformly random among passwords that meet the rule. Turn it off if you want the pure uniform draw.
Do you store or see the passwords I generate?
No. There is no account, no server call, and no storage. Refreshing the page or pressing Generate replaces the list; closing the tab drops it. Save the password you actually use in a password manager — this page is not a vault.
Is there a /random-password-generator/ or /strong-password-generator/ URL too?
No. One canonical address with a trailing slash: /developer/password-generator/. Searches like password generator online, random password generator, or strong password generator can land here. We do not publish alias slugs that would split the address people and search engines should share.

What else can I open?

These tools run in your browser. Page Utils does not store, upload, or write to localStorage the keys, tokens, or text you paste. Results are a convenience aid, not legal, tax, or security advice.