Password Generator

Character by character with crypto.getRandomValues(), the browser platform cryptographic random generator, plus rejection sampling so every character in the pool is exactly equally likely. The generation runs entirely on your device: the password is never transmitted, logged or stored anywhere.

It is the information entropy of the generated password, in bits: length × log2(pool size). For example, 16 characters drawn from an 87-character pool give about 103.1 bits. Each extra character adds a fixed amount, and each removed pool character slightly reduces it — the number shown is exact for uniform random generation, not an estimate.

Labels like "strong" or crack-time estimates depend on unverifiable assumptions about the attacker — their hardware, the password hashing scheme, whether your password is in a leaked dictionary. Entropy in bits is the honest, checkable figure underneath all of that, so this tool shows the math instead of performing confidence.

The characters i, l, 1, L, o, 0 and O are easy to misread in screenshots, printouts and read-aloud handoffs. Excluding them removes them from the pool, which reduces the entropy slightly — the stats show the smaller pool and the recalculated entropy, so nothing is hidden.

Exactly these 25: !@#$%^&*()-_=+[]{};:,.<>? — visible ASCII symbols only, with no space or characters that some forms reject. If a service restricts symbols, turn the set off and lengthen the password to compensate; the entropy readout shows the trade-off directly.

In a password manager. The generation is local and private, but a browser tab does not remember anything either — copy the result straight into your manager and let it handle storage, autofill and backups. Generating here and saving there means the password exists in exactly two places: your clipboard and your vault.