Are generated passwords uploaded?

No. Generation is entirely local.

They look nearly identical in many fonts; excluding them helps when you have to hand-write or read a password aloud. Strength drops only marginally.

Why can a password contain no digits when digits are enabled?

Digits are added to the pool, but independent sampling can miss them in a particular result. If the destination requires every class, regenerate and check its policy.

Should I check a password if a site requires digits and symbols?

Yes. Characters are sampled from the allowed pool without requiring one from every class. Check the site's requirements or regenerate, and use distinct passwords for different accounts.

Password generator

Generate configurable passwords with the browser’s secure RNG

Computed in your browser

Choose length, count and allowed characters, then generate. Enabling a character class allows it but does not guarantee it appears in every password.

Length

Count

Output

Example

Input

Length: 20 · Count: 1 · Pool: a-z, A-Z, 0-9

Example result

20 randomly selected characters

Results vary each time. This example disables symbols and excludes 0, O, 1, l and I. The illustration is not a password to reuse.

Technical details & limits

crypto.getRandomValues supplies randomness, with rejection sampling to avoid modulo bias. Each position is sampled independently from the combined pool; enabling a class allows it but does not guarantee its appearance in every password. L×log2(N) is theoretical entropy under this model, not a guarantee of account security or cracking time.

About this tool

Generate random passwords locally with lengths of 4–128 characters, batches of 1–50, selectable character pools and ambiguous-character exclusion. Uses cryptographic randomness without sending generated values to a server.

Use cases

Create a strong password for a new account.
Generate a batch of one-off API keys or temporary tokens.

How to use

Pick length, character classes and options.
Click Generate. Passwords are generated only in your browser and are not uploaded.

Notes

Uses crypto.getRandomValues, not Math.random. Real strength depends on length and character mix. Do not paste passwords into untrusted third-party sites.

FAQ

Are generated passwords uploaded?: No. Generation is entirely local.
Why exclude 0O1lI?: They look nearly identical in many fonts; excluding them helps when you have to hand-write or read a password aloud. Strength drops only marginally.
Why can a password contain no digits when digits are enabled?: Digits are added to the pool, but independent sampling can miss them in a particular result. If the destination requires every class, regenerate and check its policy.
Should I check a password if a site requires digits and symbols?: Yes. Characters are sampled from the allowed pool without requiring one from every class. Check the site's requirements or regenerate, and use distinct passwords for different accounts.

Related tools

Password generator · Generate configurable passwords with the browser’s secure RNG — Password generator — Tool illustration · dayeku.com