Generate strong, random passwords locally in your browser - choose the length and character types, with no upload.
Running locally on your device ...
No. Everything runs in your browser - your file never leaves your device. How this is verifiable
A good password lives on two things: enough length and real randomness. The longer it is and the more it mixes lower-case, upper-case, digits and symbols, the more attempts an attacker needs to guess it. This generator rolls such a password instantly and locally - ideal for a new account, an API key placeholder, or the Wi-Fi password you are about to move into your password manager.
You set the length and which character classes are allowed, and you can optionally exclude easily confused characters (such as l, 1, O, 0) so the password stays easy to type. When several classes are selected, at least one character from each is guaranteed. The randomness comes from the browser cryptographically secure source (Web Crypto), not from a weak pseudo-random generator - and the selection is bias-free, so every allowed character is equally likely.
As an alternative to character mode, passphrase mode produces a Diceware-style password from several randomly rolled words (for example "correct-horse-battery-staple") - often easier to remember and type than a plain character string. The words come from the Electronic Frontier Foundation public EFF short wordlist (1296 entries, public domain) and are drawn, just like in character mode, from the browser cryptographically secure randomness source; that gives each word about 10.3 bits of entropy. You choose the word count (3 to 10), the separator (hyphen, space, or a random digit between words), whether each word starts with a capital letter, and whether an extra random digit is appended.
The crucial part for passwords: generation runs entirely locally in your browser in pure JavaScript - the password is not uploaded, not stored, and no foreign library is loaded from a CDN. That is exactly the point, because a password you type into an external online form must be considered compromised. The password appears instantly, masked, in the field; one click reveals it or copies it straight to the clipboard, and a strength meter live-estimates the entropy in bits as you adjust the length and character types.
| Input formats | No file (generator) |
|---|---|
| Output format | TXT |
| Batch processing | No |
| Processing | Locally in your browser (JavaScript) |
| File upload | None |
Limitations: This tool generates one password, it does not store it - keep it in a password manager, not as a file. The actual security depends on the chosen length and character variety; very short passwords stay weak. Some services reject certain symbols. The length ranges from 8 to 64 characters (8 as a safety floor against passwords that are too short and easy to guess; 64 as a generous but practical ceiling, since most password fields would not put a longer input to good use anyway).
No, and that matters most here. Generation runs entirely locally in your browser; the password never leaves your device and is not stored or sent.
As a rule of thumb at least 16 characters with mixed character classes. For especially sensitive accounts, longer is better. Length beats complexity.
The browser cryptographically secure source (Web Crypto) with bias-free selection, not a weak pseudo-random generator. That makes the values unpredictable.
Yes, as long as the length allows: when several classes are selected, at least one character from each is guaranteed to appear in the password.
A Diceware-style password made of several random words from the public EFF short wordlist (1296 words, about 10.3 bits of entropy per word) instead of individual characters - often easier to remember. Word count (3 to 10), separator, capitalisation and an extra digit are all adjustable.
In a password manager. This tool only generates, it stores nothing - copy the password straight from the field into your manager.
UUID generator · Encrypt file · Shuffle Lines · Generate PGP key pair · Create password ZIP · Extract password ZIP