Are passwords sent to a server?

No. crypto.getRandomValues() uses the browser's CSPRNG and passwords are never transmitted externally.

A measure of how hard a password is to guess. Higher bit count means stronger. 60+ bits is considered "Strong".

What symbols are included?

!@#$%^&*()-_=+[]{}|;:,.<>? — 28 characters.

Password Generator - Cryptographically Secure Random Passwords

Generate cryptographically secure passwords using crypto.getRandomValues(). Configure character types (uppercase, lowercase, digits, symbols), length (8–128), excluded characters, and count (1–20). Entropy strength is displayed.

Length: 16Count

A-Z a-z 0-9 SymbolsExclude chars:

Entropy: 95 bits → Strong

How to Use

Set the password length with the slider (8–128 characters)
Select character types using the checkboxes (uppercase, lowercase, digits, symbols)
Exclude ambiguous characters like 0, O, o, 1, l, I in the exclusion field
Set the count and click Generate
Entropy and strength are displayed automatically

Usage Examples

Strong password (16 chars):
Enabling all character types at 16 characters yields approximately 95 bits of entropy.

Numeric PIN:
Disable uppercase, lowercase, and symbols and select digits only for a 6–8 digit PIN.

Excluding ambiguous characters:
Enter "0Oo1lI" in the exclusion field to avoid visually confusing characters.

FAQ

Are passwords sent to a server?: No. crypto.getRandomValues() uses the browser's CSPRNG and passwords are never transmitted externally.
What is entropy?: A measure of how hard a password is to guess. Higher bit count means stronger. 60+ bits is considered "Strong".
What symbols are included?: !@#$%^&*()-_=+[]{}|;:,.<>? — 28 characters.
What is the maximum password length?: Up to 128 characters.
How many passwords can be generated at once?: Up to 20 passwords at a time.

Related Tools

Update History

Last Updated: 2026-02-20

2026-02-20 Initial release