Password generator
Passwords generated with your browser's cryptographic randomness (crypto.getRandomValues), without bias, right on your device: nothing is sent or stored. Choose the length and character types, or a pronounceable password or a PIN code.
What the tool does
Cryptographic randomness
Draws use crypto.getRandomValues, the browser's secure randomness source, rejecting values that would introduce statistical bias.
Three types
Random (any length and character sets, at least one character of each type), pronounceable (consonant-vowel, easy to dictate) and PIN code.
Entropy and strength
Entropy estimate in bits, strength level and average brute-force time, to compare your choices.
How to choose well
For an account protected by a password manager, aim for 16 or more random characters. For a password you must remember or dictate, prefer the pronounceable type. Beyond 80 bits of entropy a brute-force attack is no longer realistic; what matters most is never reusing a password.
FAQ
Is a password generated here really random?
Yes: it comes from your browser's cryptographic generator, not Math.random(). The page contacts no server to produce it.
Why offer to avoid ambiguous characters?
O, 0, l, 1 and I look alike in many fonts: leaving them out avoids mistakes when a password must be retyped or dictated.
What length should I choose?
16 characters mixing letters and digits exceed 95 bits of entropy, which is plenty. Longer is better when a password manager types it for you.
Privacy
Passwords are neither sent nor stored.