How to use
- Set the password length (8 to 128 characters; default is 16).
- Tick the character types you want: lowercase, uppercase, numbers, and/or symbols.
- Optionally leave Avoid ambiguous characters on to drop look-alikes (0, O and o, 1 and l, capital I).
- Click Generate. The password appears below. Use Copy password to paste it into a password manager, a signup form, or an environment file.
Everything runs in your browser. The password is not uploaded to any server and is not put in the page URL — analytics and ads only see the address you visited, never the generated value.
What it is for
Weak or reused passwords remain a common way accounts get broken into. A local generator creates long random strings without you inventing them on the spot or copying from paper. Developers use this constantly: test users, temporary tokens in .env, staging database passwords, sandbox API keys. Anyone setting up a password manager (Bitwarden, 1Password, the browser itself) also needs a strong value for the first account.
This page focuses on the options people ask for most: adjustable length, optional symbols, and a filter for ambiguous characters — helpful when the password will be typed by hand, read aloud, or printed. You generate, copy, and paste; there is no account, no cloud history, and no “share by link” with the password embedded.
It does not replace a full password manager (which stores, syncs, and fills forms). It covers the moment you need a strong value now, on the device you are using, with nothing to install.
How it works
The browser provides crypto.getRandomValues, the system’s cryptographic randomness. The tool builds an alphabet from the character classes you enabled, strips ambiguous characters if that option is on, and picks each password position from that alphabet. The draw rejects leftover byte values at the end of the range (the same approach used by this site’s document generators) so no character becomes slightly more common just because of remainder bias. Before filling the rest, the tool reserves one position for each class you checked and then shuffles everything, so the password always contains at least one character of every chosen type, as many sites require.
There is no third-party library and no network call. Closing the tab clears what was in memory. The page does not remember previous passwords: each Generate click produces a new value. If no character class is checked, the tool warns you and does not generate — that avoids an empty password or an invalid alphabet.
Length matters: 16 characters mixing letters, numbers, and symbols is already strong for most sites; 20 or more helps when a policy asks for more. Symbols grow the search space, but some older systems reject certain characters — uncheck Symbols or generate again until the destination accepts the value. Avoiding ambiguous characters shrinks the alphabet a little; on long passwords the strength impact is small and readability goes up.
Frequently asked questions
Is my password sent to a server?
No. Generation and copy happen only on your device. Nothing from the result is put in the URL or transmitted by this page.
What are ambiguous characters?
Pairs that are easy to mix up when typing or reading: zero and the letters O and o, one and lowercase L, capital I. With the option on, those characters are removed from the alphabet used for picking.
How many characters do I need?
For most signups, 16 or more with upper and lower letters, numbers, and symbols is a solid baseline. Corporate policies sometimes require 12, 14, or 20 — change the length field and generate again.
Can I use the generated password in production?
Yes, if you store it in a secure manager and do not paste it into chat or email. On a shared machine, avoid leaving the tab open with the password visible; generate, copy, and close.
Why can’t I generate with every type unchecked?
With no character class selected the alphabet is empty. The tool shows a warning instead of inventing odd behavior.
Is an online generator safe?
On this page, in the sense that the value does not leave the browser, yes. Still prefer dedicated managers to store and reuse passwords; use this tool to create the initial value with clear options and no install.