Add your input
A length, a count, and the character sets to draw from.
Code drawer
Password generator
Get unbiased random passwords with a clear strength estimate.
Privacy built inYour work stays with you
Include
Entropy: 130 bits
Passwords
Generate to see passwords.
Nothing generated here is stored or recoverable — copy what you need before leaving.
Your work stays private in your browser while you use this tool.
What does password generator do?
The password generator draws characters from the sets you choose using the browser's cryptographic random source and reports the result's entropy in bits. Selection uses rejection sampling rather than a modulo, so every character in the alphabet is equally likely. Nothing generated is stored, transmitted, or recoverable.
- Input
- A length, a count, and the character sets to draw from.
- Result
- Generated passwords with their entropy in bits.
- Price
- Free
- Account
- Not required
How to use password generator
Choose your settings
Get unbiased random passwords with a clear strength estimate.
Save or copy
Generated passwords with their entropy in bits.
A practical tip
Nothing generated here is stored or recoverable — copy a password before leaving the page.
When to use password generator
Create a unique password for a new account before saving it to a password manager.
Generate a batch of credentials for seeding a test environment.
Produce a password that avoids characters easily confused when read aloud or retyped.
Worked example
A concrete password generator example
- Input
- 20 characters from lowercase, uppercase, digits, and symbols
- Result
- An alphabet of 94 characters gives about 131 bits of entropy.
What to expect
How it works
The chosen sets are combined, optionally with ambiguous glyphs removed, and duplicates dropped. Random bytes come from crypto.getRandomValues. A byte is only used when it falls below the largest whole multiple of the alphabet size; the rest are discarded and redrawn, because taking a byte modulo the alphabet size would make the first few characters more likely than the others. Entropy is reported as log2(alphabet size) multiplied by length.
Know before using
Limits and edge cases
- Entropy describes the generation process, not the password's fate afterwards. A high-entropy password reused across sites or captured by malware is no safer than a weak one.
- Excluding ambiguous characters shrinks the alphabet and therefore lowers entropy slightly for the same length; the reported figure already accounts for it.
Standards and sources
Common questions
Password generator FAQ
Is password generator free to use?
Yes. Password generator is free to use.
Does password generator keep my work private?
Yes. Your work stays private while you use the tool — nothing you enter is uploaded.
Are the generated passwords ever sent anywhere or saved?
No. They are produced in the page and held only in the page. Nothing is written to storage, sent to a server, or included in any log or report, which also means a password lost on reload cannot be recovered.
Why avoid taking a random byte modulo the alphabet size?
256 is not a whole multiple of most alphabet sizes, so a plain modulo makes the first 256 modulo size characters slightly more likely than the rest. Discarding and redrawing bytes in that tail keeps every character equally probable.