Password Generator
Create strong passwords and passphrases offline.
Processed privately on your device
Generated with crypto.getRandomValues. Nothing is saved or sent anywhere.
Helpful guidance
A strong password should be unique, unpredictable and long enough that automated guessing is impractical. This generator uses the browser’s cryptographic random-number source, never Math.random. Rejection sampling avoids modulo bias, so every allowed character has an equal opportunity to appear.
Twenty mixed characters is a strong default for most accounts. Excluding ambiguous characters helps when a password must be typed from paper, while symbols can be disabled for older systems with restrictive rules. Entropy is an estimate based on pool size and length; it describes randomness, not whether a compromised or reused password is safe.
Passphrases select from the EFF Large Wordlist of 7,776 memorable words and credit its CC BY 3.0 license. The list is fetched locally only after passphrase mode is selected. Generated values are never stored, added to history or sent to analytics. Use a trusted password manager rather than reusing the same result.
Frequently asked questions
Why not use Math.random?
Math.random is designed for simulations, not secrets. crypto.getRandomValues provides operating-system-backed randomness suitable for password generation.
How much entropy is enough?
More is better, but roughly 70 bits is strong for most personal uses when the value is truly random and unique. High-value accounts benefit from longer passwords and multi-factor authentication.
What is a passphrase?
It is a sequence of randomly selected words. Five or more EFF words can be easier to type while retaining strong calculated entropy.
Is my generated password sent anywhere?
No. Generation, display and copying happen locally. Analytics never contains the generated value, and clipboard clearing is attempted after about 30 seconds.