EN中文

Generate · Account security

Password Generator

Generate a strong random password locally with Web Crypto, adjustable length, character groups, and ambiguous-character exclusion.

Secure random password

Choose password options

Web Crypto
Generated password

Nothing is generated until you select the button.

Passwords are generated locally, never stored, and never placed in the URL.

Create a strong password

Choose a length from 4 to 128 characters and select uppercase letters, lowercase letters, numbers, and symbols. The generator guarantees at least one character from every selected group, fills the remaining positions from the combined pool, and securely shuffles the result.

For most accounts, a long unique password matters more than creating a memorable pattern. Twenty randomly selected characters from several character groups provide a large search space, although an individual website may impose a shorter maximum or reject particular symbols.

Passphrase mode selects three to ten words independently from the local word list and joins them with a chosen separator. More words increase the search space; use at least five for an important account unless its password rules require another format.

How randomness is generated

The password uses crypto.getRandomValues(), the browser’s cryptographically secure random-number interface. Random selection uses rejection sampling to avoid modulo bias. Generation happens after you press the button and remains entirely in your browser.

The displayed bit estimate is the idealized logarithm of the available character pool raised to the selected length. It describes the approximate search space under uniform random selection; it is not a promise about an account provider’s storage, rate limits, or security.

Use a password manager

A reputable password manager can create, store, and fill a different random password for every account. Reusing even a strong password allows one breached service to expose other accounts. Enable multi-factor authentication or passkeys where available.

After copying a generated password, save it directly in the intended password manager. Clipboard contents can be visible to other applications or clipboard-history tools, so avoid leaving sensitive passwords copied longer than necessary.

Ambiguous characters

The exclusion option removes characters that can be confused in some fonts, including uppercase I, lowercase l, the digit 1, uppercase O, lowercase o, and zero. This can help when a password must be typed from paper or another screen, at the cost of a slightly smaller character pool.

Limitations and safety

  • This page does not save, transmit, or recover generated passwords.
  • A compromised browser, device, extension, or operating system can undermine any browser-based generator.
  • Some websites silently truncate passwords or restrict symbols; confirm the saved password works before signing out.
  • Never share a real password through a QR code, URL, email, or chat message.

Use the Random Number Generator for unbiased integer draws. The QR Code Generator is intended for non-secret content.