Password generator

Randomness you can verify, not trust

Many password generators use Math.random(), which was never designed for secrecy. This generator draws every character from crypto.getRandomValues(), the same cryptographically secure pseudo-random number generator your browser uses for certificates and the Web Crypto API. The difference matters: a CSPRNG produces output that cannot be predicted from earlier output, even by someone who knows the seed algorithm.

Reading the strength meter

The meter and entropy figure are derived from a real, measurable quantity: entropy in bits, computed as the password length multiplied by the base-2 logarithm of the character pool size. Weak passwords sit under roughly 40 bits; anything above 70 bits is already far beyond what a brute-force attack can realistically cover.

Local generation, zero exposure

Generation happens in this tab with no network request. A password that is created and copied here never exists on a server, never enters your history, and never appears in any log. If you want it to exist anywhere, you are the one who decides where to paste it.

A strong random password generator for every length

Need a secure password generator that produces strong passwords every time? This tool is the strong password generator you can rely on: choose 8, 10, 12, or 15 characters, or anything from 8 to 128, and see how secure the result is before you copy it. It is a strong random password generator trusted for app passwords, a password manager seed password, or login credentials - a free password generator with no limits.

Wondering "how secure is my password?" That is exactly what this random password generator answers with a live entropy figure. Whether you are looking for a bcrypt password generator for an application, strong password examples to hand to a team, or a way to generate app passwords for your tools, it generates the 8 characters, 10 characters, 12, or 15 characters you need locally, with no signup.