Generate strong, genuinely random passwords in your browser — with a live entropy readout so you can see how strong they actually are.
Add your file
Drop your file into the box above or click to browse. It's processed privately in your browser — nothing is uploaded.
Choose your options
Adjust the available settings to get exactly the result you need.
Download the result
Run the tool and download your file instantly — no sign-up, no watermark.
The passwords people invent themselves are far more predictable than they feel. Substituting a 3 for an e, appending a birth year or picking a favourite team are all patterns that cracking software tries first. Random generation removes the pattern entirely.
Strength here comes from two numbers: how many characters long the password is, and how many different characters could appear at each position. The entropy figure combines them into a single measure of how much work an attacker faces, which is a far more useful signal than the colour-coded strength meters most sites show.
Generation uses your browser's cryptographic random number generator, and rejection sampling ensures a uniform distribution — a subtle detail that many generators get wrong by taking a random number modulo the alphabet size, which quietly biases results toward the earlier characters. Nothing is transmitted, so the password exists only in this tab until you copy it.
They come from crypto.getRandomValues, your browser's cryptographically secure random source — the same one used for encryption keys. Characters are chosen by rejection sampling so no character is more likely than another.
Sixteen characters or more for anything that matters, and twenty-plus for a password manager's master password or an email account. Length adds far more strength than adding another symbol does.
Entropy measures how many guesses an attacker needs. Every extra bit doubles it. Under 55 bits is weak, 75 is reasonable, and 100 or more is excellent against offline cracking.
It removes I, l, 1, O, 0 and o — the characters people confuse when reading a password aloud or copying it from a printed sheet. Useful for a Wi-Fi code, unnecessary when you are pasting into a password manager.
No. They are generated in this tab, never transmitted, never logged and never written to disk. Closing the tab destroys them, so save the one you want first.
Never reuse a password across sites. Generate one per account and keep them in a password manager — that is the single biggest improvement most people can make to their security.
Generate QR codes for URLs, text, Wi-Fi and more.
Count words, characters, sentences and reading time as you type.
Convert text between UPPER, lower, Title, camelCase, snake_case and more.
Format, validate, minify and sort JSON — with clear error messages.
Generated with crypto.getRandomValues in this tab. Nothing is transmitted, logged or stored.