Password Generator
Strong passwords from cryptographic randomness — never leaves your browser
Confusing characters (l·I·O·0·1) are excluded. Generated passwords are never stored.
Generate strong passwords with cryptographic randomness (crypto.getRandomValues). Confusing characters are excluded and every selected set is guaranteed to appear. Never stored or transmitted.
What you can do
- ✓Length 8–40
- ✓Case, digits, symbols toggles
- ✓Excludes look-alikes (l·I·O·0·1)
- ✓One-click copy
How to use
- 1Pick length and character sets
- 2Press Generate and copy
Supported formats · Text
Generate hard-to-guess passwords with the browser's cryptographic random source (crypto.getRandomValues). Choose a length from 8 to 40, whether to include upper and lower case, digits, and symbols; every selected type is guaranteed to appear, and look-alike characters such as l, I, O, 0, and 1 can be excluded. Nothing is stored or sent.
How to use it
- 1Set the length and choose character types (upper, lower, digits, symbols). Turn on 'Exclude look-alikes' if needed.
- 2Review the generated password; generate again if you like.
- 3Click Copy and paste it into your password manager or the sign-up form.
When it comes in handy
Signing up for a new service, rotating a work account password on schedule, setting the initial password for a Wi-Fi router or admin account, or making a temporary access string.
If you use a password manager, its built-in generator is more convenient; this tool is for when you need one quickly without it.
How long and complex?
Length matters more than variety. Twelve characters mixing all four types is very strong, and sixteen or more makes brute force impractical with today's hardware. If a site forbids symbols, make up for it with extra length.
The point of random generation is the absence of guessable patterns (name plus birth year, sequential digits). This tool uses the browser's cryptographic random source, so the output is mathematically hard to predict.
After generating
Never reuse a password across sites; one leak then opens the rest. Store it in a password manager and enable two-factor authentication on important accounts.
'Exclude look-alikes' exists for passwords that will be copied by hand or read aloud, where l and I or O and 0 get confused. If you'll paste it, leaving the option off gives more combinations.
Frequently asked questions
Is the password stored?+
No. Generation happens inside your browser and the password is never stored or sent.
How secure is it?+
It uses cryptographic randomness, so it is very hard to predict. Twelve or more characters mixing types is strong; sixteen or more is recommended.
Why exclude look-alike characters?+
Dropping l, I, O, 0, and 1 avoids mistakes when writing the password by hand or reading it aloud.
The site doesn't allow symbols.+
Turn symbols off and increase the length instead; length has the bigger effect on strength.
Can it make a memorable password?+
This tool makes random strings only. Rather than memorising, store passwords in a password manager.
Related tools