Password Generator
Generate strong random passwords in your browser using the operating system CSPRNG. Presets cover database credentials, SSH logins and the character rules most websites enforce.
Generated password
Passwords are generated locally with crypto.getRandomValues and are never sent, logged or stored anywhere.
Quick presets
One click applies a length and character set tuned for that use case.
Generate several at once
Useful when you need to rotate credentials for a whole set of accounts.
What this tool handles
Cryptographically secure
Randomness comes from the operating system via crypto.getRandomValues, with rejection sampling so no character is more likely than another.
Presets that match real rules
Database and SSH presets exclude symbols that break connection strings or need shell escaping — the usual reason a generated password fails in practice.
Honest strength estimate
Entropy is computed from the actual character pool and length, and the crack time assumes an offline GPU attack rather than a flattering online guess rate.
Frequently asked questions
Is it safe to generate a password on a website?
With this one, yes — generation happens in your browser tab using the OS random source, and the page makes no network requests while you use it. You can confirm that in your browser devtools, or load the page and go offline first.
How long should a password be?
For an account protected by rate limiting, 16 characters with mixed classes is plenty. For a password manager master key or anything that could be attacked offline, aim for 24 characters or more.
Why exclude look-alike characters?
Because 0 and O, or 1 and l, get confused when a password is read aloud, written down or typed from a printout. It costs a small amount of entropy and prevents a common support headache.
Why do the database and SSH presets use fewer symbols?
Characters like @ : / and ? have meaning inside connection strings and URIs, and quotes or backslashes need escaping in shell commands. Excluding them avoids passwords that are technically strong but break the system you paste them into.