Password Generator
Passwords invented by people follow patterns, and patterns are the first thing cracking dictionaries eat. This generator removes the person from the loop: passwords are drawn from your browser's cryptographically secure random generator, with no patterns, no server and nothing stored — and the entropy of your chosen settings is shown in bits so the strength is visible before you commit.
Generated locally with crypto-grade randomness. Nothing is sent or stored — save the one you use in a password manager.
How to use it
- Set the length — 16 characters or more is a sound default.
- Choose the character sets, and tick "exclude look-alikes" if the password will ever be read or typed manually.
- Press Generate, glance at the entropy figure, and copy the password straight into your password manager.
Key facts
- Entropy is computed as length × log₂(pool size): the default settings (16 characters, all four sets) yield about 103 bits.
- Characters are picked with rejection sampling over crypto.getRandomValues output, so every character in the pool is equally likely — no modulo bias.
- Nothing generated here is transmitted or stored. Close the tab and un-copied passwords are gone for good.
About this tool
Passwords invented by people follow patterns, and patterns are the first thing cracking dictionaries eat. This generator removes the person from the loop: passwords are drawn from your browser's cryptographically secure random generator, with no patterns, no server and nothing stored — and the entropy of your chosen settings is shown in bits so the strength is visible before you commit.
Set the length, choose which character sets to draw from, and optionally exclude look-alike characters (I, l, 1, O, 0) for passwords you may have to read aloud or type by hand. Generate several candidates at once and keep the one your password manager likes.
Like every TextKit tool, the Password Generator runs entirely on your device. There is no account, no upload and no record of the content you process — close the tab and everything is gone.
Frequently asked questions
How long should a password be?
Length beats complexity. Sixteen characters drawn from letters, digits and symbols carry roughly 100 bits of entropy — far beyond brute force. For a master password protecting a password manager, go longer.
What does the entropy number actually mean?
It estimates the size of the search space an attacker faces, in bits. Each additional bit doubles the work. Around 80 bits is out of practical brute-force reach; 100+ is comfortable for years.
Is generating a password on a website safe?
On this one, yes: the generation happens locally with crypto-grade randomness, nothing crosses the network, and the page works fully offline. The remaining rule is on you — store it in a password manager and never reuse it elsewhere.
Related tools
UUID Generator
Bulk-generate random version-4 UUIDs from your browser's crypto source.
~/tool/json-formatterJSON Formatter & Validator
Pretty-print, minify and validate JSON, with the exact error location when it breaks.
~/tool/json-to-csvJSON to CSV Converter
Convert a JSON array of objects into a tidy CSV, header row and quoting included.