What it does
Creates random passwords or passphrases using your browser’s cryptographic random number generator (crypto.getRandomValues). Every character and word is picked with rejection sampling, so no symbol is more likely than another.
Password mode
- Length from 4 to 128 characters.
- Choose uppercase, lowercase, digits, symbols and your own custom characters.
- Exclude look-alikes such as
I,l,1,Oand0for passwords that will be read aloud or typed by hand. - At least one from each set satisfies typical password policies. The generator draws uniformly from all passwords that meet the rule, and the entropy shown is calculated exactly for that rule.
- Generate up to 500 at once, then copy or download them.
Passphrase mode picks words from the EFF Short Wordlist (1,296 words, CC BY 3.0 by the Electronic Frontier Foundation). Each word adds about 10.3 bits. Options: number of words, separator, capitalization and an added digit.
Reading the strength meter
Entropy is the base-2 logarithm of how many different results the current settings can produce. It assumes an attacker knows your settings, which is the honest worst case. As a rough guide: under 40 bits is weak, 60 bits is reasonable for online accounts, and 80 bits or more is strong. The rating does not apply to passwords you invent yourself.
Privacy
Passwords are generated in your browser and are never sent anywhere or saved. Only your settings (length, sets, word count) are remembered on this device.