Password generator
Generate a strong random password locally: pick the length and which character sets to include, and regenerate until you like it. The password is created by your browser's crypto source and is never stored or transmitted.
StrengthStrong · 98 bits of entropy
Text is processed by your own browser and never leaves your device: this page has no server to send it to.
How it works
Characters are drawn from your selected sets with the browser's cryptographically secure generator, using rejection sampling so every character is equally likely. Each selected set is guaranteed at least one character, and lookalike glyphs (l, 1, I, O, 0) are excluded from the pools entirely.
Frequently asked questions
Is generating a password in a web page safe?
This one runs entirely in your tab with crypto.getRandomValues and never sends or stores anything; you can even load the page, disconnect from the network, and generate. The usual risk with online generators is server-side generation, which this page never does.
How long should a password be in 2026?
Sixteen characters with mixed sets is a solid floor for anything that matters, and length beats complexity: 20 lowercase characters are stronger than 12 mixed ones. Above all, never reuse a password across sites; a password manager makes that practical.
Why are l, 1, O and 0 missing?
They are excluded on purpose. When a password is read aloud or typed from paper, those glyphs are the ones that get confused; removing them costs a fraction of a bit of entropy and saves real mistakes.