Password Generator
Generate strong random passwords and memorable passphrases with full control over length, character sets, and exclusions. Runs entirely in your browser — nothing is stored.
How to Use
- Pick a mode: Random password (short and dense) or Passphrase (long words, easy to remember).
- Adjust the options — length or word count, character sets, exclusions, separator, and how many results you want at once.
- Click Generate to create fresh results (press again any time for new ones).
- Use Copy on a single result or Copy all, then store it in a password manager — this page never saves anything.
Example
Random password (16 chars, all sets): vR7&qLm2#xPz9@Kd ≈ 103 bits
Passphrase (6 words + number): Coral-Tundra-Lantern-Moss-River-Ember-47 ≈ 54 bits
Bank PIN style (8 digits, no ambiguous): 4829-6375
Example strings are illustrative — every result you generate is fresh random output.
Frequently Asked Questions
How are these passwords generated?
Every character comes from your browser's built-in cryptographic random source (crypto.getRandomValues). The code avoids modulo bias, guarantees one character from each selected set, and shuffles the result with the same secure source — no predictable patterns.
What is the difference between a password and a passphrase?
A password is a short string of random characters (for example vR7&qLm2#xPz9). A passphrase joins 224 simple words, which is far easier to type and remember while still being long. Both are generated with the same secure randomness — pick whichever fits the account.
Are my results sent to a server or saved?
No. Everything happens in this tab with no network requests. Nothing is uploaded, logged, or stored — close the tab and it is gone unless you copied it.
What does the crack-time estimate mean?
It assumes an attacker with a fast offline attack, guessing 10 billion passwords per second against a stolen hash. It is a realistic worst case for a weak service, not a guarantee — services with rate limits are much slower to attack.
Should I turn on “exclude ambiguous”?
Yes, if you often read passwords aloud or write them down: it removes look-alike characters such as 0/O and 1/l. The strength estimate updates automatically because the character pool gets smaller.
How long should my password be?
At least 12 characters for everyday accounts and 16 or more for important ones. This tool defaults to 16 characters with all four character sets, which is about 103 bits of entropy.