Password Generator

A password generator is a tool that creates random, unpredictable passwords from a configurable set of characters. Unlike passwords chosen by humans - which tend to follow predictable patterns - a generated password has no pattern, making it resistant to dictionary attacks, brute-force attacks, and credential stuffing. Our password generator uses the browser's native Web Crypto API to produce cryptographically random output, ensuring each password is as unpredictable as possible. The tool supports lengths from 4 to 256 characters, four character sets, ambiguous character exclusion, and bulk generation of up to 50 passwords at once - all running locally in your browser with no data sent to any server.

1. 1. Configure Your Password Requirements: Set the password length (4-256 characters), choose how many passwords to generate (1-50), and select which character sets to include: uppercase, lowercase, numbers, and symbols.
2. 2. Instant Browser-Based Generation: Click Generate Password and the tool instantly creates your passwords using the browser's Web Crypto API. All generation happens locally - your passwords are never sent to any server.
3. 3. Copy and Save Your Passwords: Copy individual passwords with the per-row Copy button, or copy all generated passwords at once. Save them immediately in a password manager - generated passwords cannot be recovered later.

• Cryptographic Randomness: Our password generator uses the browser's built-in Web Crypto API (crypto.getRandomValues) instead of weak Math.random(). This ensures each character is selected with true cryptographic randomness, making the output unpredictable and resistant to statistical attacks.
• Rejection Sampling: To avoid modulo bias - where some characters are slightly more likely than others - the generator uses rejection sampling. Characters are only accepted when the random value maps uniformly to the charset, ensuring every character has an equal probability of selection.
• Enforce All Sets: When "Enforce All Selected Sets" is enabled, the generator guarantees at least one character from each selected character class appears in the password. This satisfies common password policy requirements without reducing entropy.
• Entropy Estimation: The live strength meter calculates entropy as: bits = length × log₂(charset size). For example, a 16-character password using all four character sets (charset size ≈ 90) has approximately 104 bits of entropy - well above the 80-bit threshold recommended for high-security applications.

Our password generator does not store, log, or remember any generated passwords. Once you close or refresh the page, the passwords are gone permanently. Always copy your generated passwords immediately and save them in a reputable password manager such as Bitwarden, 1Password, or KeePass. Never store passwords in plain text files, emails, or browser bookmarks.