Password Generator

Generate strong, random passwords up to 64 characters with a click. Pick which character types to include — uppercase, lowercase, digits, symbols — and optionally exclude look-alikes like 0/O and 1/l/I. A live strength meter shows the estimated entropy in bits so you can tell at a glance whether a password is weak, strong, or excellent. Everything runs in your browser using the OS-level secure random source; no password ever leaves the page.

1. Pick the password length with the slider — 12+ is a sensible minimum, 16+ for anything important.
2. Toggle the character types you want. The more types you allow, the stronger the password for a given length.
3. Tap Copy to put the password on your clipboard, or Regenerate to roll a different one.

• How long should my password be?

  For most accounts, 16 characters with a mix of types is plenty (~95+ bits of entropy). For high-value accounts, push to 20+ and turn on a password manager. Length matters more than special characters — a long all-lowercase passphrase often beats a short complex one.

• What's the difference between basic and extended symbols?

  There's no industry standard for which symbols a site accepts. "Basic" covers punctuation that almost every site allows (!@#$%^&*()-_=+). "Extended" adds brackets, quotes, slashes, and the like — broader entropy but a small chance a legacy validator rejects them. When in doubt, start with basic only and add extended if the site accepts it.

• What does the strength bar measure?

  It estimates entropy in bits — roughly, how many random binary choices it would take to reproduce your password. 45+ bits is fair, 65+ strong, 90+ excellent. The math assumes the generator is truly random (which it is, here).

• Is the password generated on a server?

  No. Everything happens in your browser using window.crypto, which is backed by the operating system's secure random source. The page doesn't even know your password — Copy uses your clipboard locally.

• Why exclude look-alikes?

  Characters like 0 vs O, or 1 vs l vs I are hard to tell apart in many fonts. If you ever need to read or type the password by hand, excluding them avoids transcription errors. Skip the option when machines do all the typing.