Password Generator
Generate passwords with cryptographically secure randomness.
Loading tool…
About this tool
Generates passwords from the platform CSPRNG, never Math.random. Length contributes far more to strength than character variety does: a long password from a small alphabet beats a short one with symbols sprinkled through it.
Limitations
- Generated passwords are never stored, logged, or placed in the URL.
- The strength readout is an entropy estimate. It cannot know whether the password has appeared in a breach corpus.
Questions
- Are these actually random?
- They come from crypto.getRandomValues, the browser's cryptographically secure generator. The same source underpins TLS key generation.
- Is generating a password in a web page safe?
- The value never leaves this tab — no storage, no URL, no network request. It is still reasonable to prefer your password manager's generator, which stores the result in the same trusted place you will use it.
- What does excluding look-alikes do?
- Drops 0/O and 1/l/I, which people misread and mistype. It costs a little entropy and saves a lot of frustration for anything that will be typed or read aloud.
Privacy
This page does its work in your browser. What you paste is processed by JavaScript running on your own device and is never sent to a DevToolery server — there is no server that could receive it. The page itself is a static file delivered by a CDN. See exactly what is stored.