Is this password sent anywhere?

No — it's generated and displayed entirely in your browser using the Web Crypto API's crypto.getRandomValues, never transmitted or logged.

How is the strength estimated?

From the password's length and the size of the character pool it draws from (lowercase, uppercase, numbers, symbols) — a standard entropy estimate, not a dictionary-attack check.

Should I exclude ambiguous characters?

Only if you expect to type the password by hand from a printout — excluding 0/O/1/l/I avoids misreading, at a very small cost in strength.

Password Generator

Generate a strong random password, with control over length and character types, and a live strength estimate.

Generated using your browser's cryptographically secure random number generator (crypto.getRandomValues) — nothing is sent to a server, and nothing is stored after you leave the page.

Processing happens locally in your browser. Nothing you enter is uploaded.

How It Works

Adjust the length and character types, then click Generate. Copy the result — nothing is stored after you leave the page.

Example

A 16-character password using all character types might look like: K7#mPz2$qLx9!vRt

Frequently Asked Questions

Is this password sent anywhere?: No — it's generated and displayed entirely in your browser using the Web Crypto API's crypto.getRandomValues, never transmitted or logged.
How is the strength estimated?: From the password's length and the size of the character pool it draws from (lowercase, uppercase, numbers, symbols) — a standard entropy estimate, not a dictionary-attack check.
Should I exclude ambiguous characters?: Only if you expect to type the password by hand from a printout — excluding 0/O/1/l/I avoids misreading, at a very small cost in strength.

Related Tools

JWT Decoder