Generate a strong random password
Passwords are created with your browser's cryptographic random source and measured in bits of entropy, so you can see exactly how strong they are.
How it works
Choose a length
Twenty characters or more is a strong default.
Select character sets
Mixing letters, digits and symbols widens the search space.
Generate
A fresh password is created each time you press the button.
It is processed on your machine
This is the kind of content people are most nervous about pasting into a website. Here nothing is transmitted: your browser reads the input, the tool works on it in the tab, and the result is handed straight back. Close the tab and it is gone.
- Opened from your disk by your browser — not sent anywhere first.
- Held in the tab while the tool works, then dropped.
- Saved to your device by your browser, not by a link to a server.
- Closing the tab clears the working copy completely.
- No account, so nothing is ever attached to an identity.
- No tracking of what you worked on or what was inside the file.
There is no queue and no retention policy to read. Whatever you pasted is released the moment the tab closes. See how your data stays inside the tab for the full picture, or follow the DevTools check to verify your file never leaves.
What people use it for
Setting up a new account properly
A long random password made on your own device beats anything you would invent by hand.
Checking something before you ship it
A quick pass in the browser is faster than wiring up a build step for a one-off job.
Working on a machine you do not control
Because nothing is transmitted, it is safe to use on a shared or locked-down computer.
Handling data you are not allowed to upload
Customer records, keys and internal names often may not leave the organisation at all. Here they do not.
Formats & limits
What this tool accepts, what it produces, and what it will never ask you for.
- Input
- The formats listed above
- Output
- A generated password
- Maximum file size
- Set by your device, not by a plan
- Files per run
- One at a time
- Sign-up required
- None
- Watermark
- Never added
- Works offline
- Yes, once the page has loaded
- Supported browsers
- Any current Chrome, Edge, Firefox or Safari
When something goes wrong
Invalid input stops with a plain message that points at the exact problem, rather than a spinner that never finishes.
The content is not in the shape this tool expects. Check for a missing bracket or an extra character and try again.
Why not an online service
A hosted version of this tool means your input is transmitted to a server you have no relationship with. Removing that step removes the whole category of risk.
A typical upload site
This tool
Questions
How random are these passwords?
They are generated with the browser's cryptographic random number generator, the same source used for encryption keys. A rejection-sampling step removes the bias that naive generators introduce.
What does the entropy figure mean?
Entropy measures how many guesses an attacker would need, expressed in bits. Each additional bit doubles the effort required. Roughly 70 bits is strong for most purposes; above 100 bits is excellent.
Are generated passwords stored or logged?
No. Generation happens entirely on your device and nothing is saved, transmitted or remembered after you close the tab.
Should I use the look-alike filter?
It removes characters that are easy to confuse, such as capital I, lowercase l and the digit 1. This helps when a password has to be read aloud or typed by hand, at a small cost in entropy.
Is there a file size limit?
No fixed limit is imposed by the tool. The practical ceiling is how much memory your device has free, because the whole job runs inside this browser tab.
Does it work without an internet connection?
Yes, once the page has loaded. Nothing is fetched while you work, so a dropped connection does not interrupt a run.