Password Generator – Strong Random Passwords

Password Generator & Strength Checker

Create strong, truly random passwords in seconds and see exactly how tough they are. Choose the length and character types, then read the live strength meter, entropy in bits and an estimated time to crack. You can also paste any existing password to test it. Everything runs in your browser using the secure Web Crypto API — no password is ever sent to a server or stored.

Generate a password

Length 20

Include characters Lowercase (a–z) Uppercase (A–Z) Numbers (0–9) Symbols (!@#$…)

Rules Exclude ambiguous characters Skips 0 O 1 l I | that are easy to confuse. Avoid repeats No two identical characters in a row.

Check your own password

Checked right here in your browser — never sent anywhere.

Your password will appear here

Pick your options and click Generate, or paste a password to check its strength.

How to use

Set the length with the slider (8–64 characters).
Turn on the character types you want: lowercase, uppercase, numbers and symbols.
Optionally exclude ambiguous characters and avoid repeats, then click Generate.
Copy your password, or paste one of your own into the checker to test its strength.

Features

Cryptographically secure randomness (Web Crypto, never Math.random)
Length slider from 8 to 64 with instant regeneration
Toggle uppercase, lowercase, numbers and symbols
Exclude look-alike characters (0 O 1 l I |) and avoid repeats
Strength meter with entropy in bits and estimated crack time
100% in-browser — passwords are never uploaded or logged

Frequently asked questions

Are these passwords really random and safe to use?

Yes. Passwords are built with the browser's Web Crypto API (crypto.getRandomValues), which is cryptographically secure randomness — not the predictable Math.random. Each character is chosen with unbiased sampling, and nothing is transmitted or saved.

Is my password sent anywhere when I generate or check it?

No. All generation and strength analysis happen locally in your browser with JavaScript. Neither the generated password nor the one you paste into the checker ever leaves your device.

What is entropy and how is the strength calculated?

Entropy measures how unpredictable a password is, in bits: length multiplied by log2 of the character-pool size. We then apply penalties for common passwords, easy sequences (like 1234 or qwerty) and repeated runs, so a long-but-obvious password is scored honestly rather than just by length.

How long should my password be?

Aim for at least 12 characters, and 16 or more for important accounts. Mixing uppercase, lowercase, numbers and symbols raises entropy fast. A random 16-character password with all four types is strong enough to resist offline attacks for a very long time.

What do the "exclude ambiguous" and "avoid repeats" options do?

Exclude ambiguous removes characters that are easy to misread — 0 and O, 1 and l and I, and the pipe |, which helps when typing a password by hand. Avoid repeats prevents two identical characters from sitting next to each other for slightly cleaner-looking results.

Password Generator & Strength Checker

Generate a password

Check your own password

Password

What's inside

How to use

Features

Frequently asked questions

Related tools