How it works
This generator builds a character pool from the sets you select, then picks characters using crypto.getRandomValues — the Web Crypto API's cryptographically secure random number source, not the predictable Math.random. It guarantees at least one character from each selected set, fills the rest of the length randomly, and shuffles the result. The strength meter estimates entropy from your password's length and character pool size. Nothing is sent anywhere: the password is generated and shown entirely in your browser, and is never transmitted or stored.
Password Generator
Generate a strong, random password using cryptographically secure randomness.
FAQ
Is this password generator actually secure?
Yes — it uses the Web Crypto API's crypto.getRandomValues, a cryptographically secure random source, instead of Math.random, which is not safe for generating secrets.
Are my generated passwords stored or sent anywhere?
No — passwords are generated and displayed entirely in your browser and are never transmitted to a server or saved anywhere.
Why exclude "ambiguous" characters?
Characters like 0, O, 1, l, and I can look identical in some fonts, which is confusing when typing a password from memory or reading it off a screen. Excluding them trades a small amount of entropy for readability.
Related tools
Unit Converter · Days Between Dates · QR Code Generator · Base64 & URL Encoder/Decoder