Generators

Password Generator

Generate strong, cryptographically secure passwords with a visual strength meter, pronounceable mode, and batch generation.

20
Uppercase (A-Z)
Lowercase (a-z)
Digits (0-9)
Symbols (!@#$%^&*)
Exclude similar characters (i, l, 1, L, o, 0, O)
Click Generate
Batch Generation

How to use this tool

  1. Drag the Password Length slider to pick a length from 4 to 128 characters — the number updates beside it.
  2. Choose which character types to include with the Uppercase (A-Z), Lowercase (a-z), Digits (0-9), and Symbols (!@#$%^&*) checkboxes.
  3. Optionally check Exclude similar characters to drop ambiguous ones like i, l, 1, L, o, 0, and O.
  4. Pick a mode with the tabs: Standard for fully random, or Pronounceable for something easier to say and remember.
  5. Click Generate to create a password — the strength bar and entropy readout update instantly.
  6. Use Copy for a single password, or Generate 5 / Generate 10 for a batch, then Copy All.

Why this tool is helpful

Cryptographically secure randomness

Passwords come from crypto.getRandomValues, not the predictable Math.random, so results are safe for real accounts.

Memorable passwords on demand

Pronounceable mode produces readable passwords you can actually say and type without looking them up.

Match any password policy

Toggle uppercase, lowercase, digits, and symbols to satisfy site rules that require or forbid specific character types.

Skip ambiguous characters

Exclude similar characters removes look-alikes, helping when you read a password aloud or type it from paper.

Batch generation

Create 5 or 10 passwords at once to rotate credentials or seed a new set of accounts, then copy them all in one click.

Instant strength feedback

The meter and entropy readout estimate how many bits of security each password carries, so you can tune length and options.

FAQ

What does "cryptographically secure" mean here?

It means passwords are drawn from your browser's CSPRNG via crypto.getRandomValues rather than Math.random, which is not designed for security and can be predicted.

What's the difference between Standard and Pronounceable?

Standard picks every character at random from your selected sets. Pronounceable alternates consonants and vowels, then appends a digit and symbols, caps the result at your chosen length, and capitalizes the first letter when uppercase is enabled.

How is strength or entropy calculated?

Entropy is estimated as length × log2(pool size), where the pool is the number of enabled characters. It maps to five bands: Weak, Fair, Good, Strong, and Very Strong.

Why does a pronounceable password always have a digit and symbols?

Letter-only patterns are easier to guess, so a digit and symbols are appended automatically to raise strength. The extra characters count toward your chosen length.

Should I exclude similar characters?

It's a trade-off: fewer mix-ups when typing or reading aloud, but a slightly smaller pool means marginally less entropy per character. If you mostly copy-paste, leave it off.

Which matters more — length or character variety?

Length matters more. Entropy grows linearly with length but only logarithmically with pool size, so a longer password of a single class usually beats a short one using every class.

Do my passwords leave my browser?

Never. All generation happens locally in JavaScript — nothing is sent to, stored on, or logged by any server.