🔒 Generated in your browser — never stored, never transmitted.
WHY USE THIS TOOL?
Weak or reused passwords are the number one cause of account breaches.
This generator uses crypto.getRandomValues() —
the same cryptographic API used by security software — to create
passwords that are virtually impossible to guess or brute-force.
Everything runs in your browser with zero data leaving your device.
A 16-character password mixing uppercase, lowercase, numbers, and symbols
gives you around 95 bits of entropy. That means an attacker trying
one trillion guesses per second would still need longer than
the age of the universe to crack it.
HOW TO USE
1. Adjust the LENGTH slider (default 16, recommended 16–32).
2. Check the CHARACTER TYPES you want.
3. Optionally enable EXCLUDE SIMILAR to avoid confusable
characters like l, 1, I, O, and 0 — helpful when typing passwords manually.
4. Click ⚡ GENERATE PASSWORD.
5. Hit COPY and paste into your password manager or site.
FREQUENTLY ASKED QUESTIONS
Q: Is this password generator safe?
Yes. Every password is generated locally in your browser using crypto.getRandomValues(), a cryptographically secure pseudorandom number generator (CSPRNG). Your passwords are never sent to any server, never logged, and never stored. This page has no backend whatsoever.
Q: How long should my password be?
For everyday accounts use at least 12 characters. For email, banking, and work accounts use 16–20 characters. For master passwords or encryption keys use 24+ characters. Longer is always better — length increases security exponentially.
Q: Does this tool store my generated passwords?
No. Passwords exist only in your browser tab while you can see them. Nothing is written to local storage, cookies, or any remote server. Refreshing or closing the page permanently discards the password. Always copy it to a password manager immediately.
Q: What does entropy mean for passwords?
Entropy (in bits) measures how hard a password is to guess. Formula: bits = length × log₂(pool size). A pool of 95 printable ASCII characters at 16 characters gives ~104 bits. 80+ bits is considered very strong; 128+ bits is effectively uncrackable with all of today's computing power combined.
Q: What symbols are included?
The symbol pool contains 32 characters: ! @ # $ % ^ & * ( ) - _ = + [ ] { } | ; : , . < > ? All are widely accepted by websites and password managers. If a site shows an error about invalid characters, uncheck SYMBOLS and regenerate.
Q: What is the "Exclude Similar" option?
It removes characters that look alike when typed or printed: lowercase L (l), the number one (1), uppercase I (I), uppercase O (O), and the number zero (0). Useful if you need to type or read back your password without a copy-paste option.