Password Generator

A strong password is random — and randomness is exactly what humans are bad at: people invent predictable passwords and reuse them across sites. This generator creates cryptographically secure random passwords using the Web Crypto API, with length from 4 to 128 characters and selectable character sets: uppercase, lowercase, digits, and symbols. You can exclude ambiguous characters such as 0, O, 1, l, I, and | so passwords stay readable, and each click returns five candidates at once. Every password comes with its entropy in bits, a strength grade, and an estimated crack time based on a 10-billion-guesses-per-second offline attack — an honest way to see what a password is actually worth. Everything runs locally, so generated passwords never travel over the network.

What this tool can do

• 🔢 Length slider from 4 to 128 characters
• 🔠 Character sets: uppercase, lowercase, digits, symbols
• 🚫 Exclude ambiguous characters like 0, O, 1, l, I, and |
• 🎰 Bias-free random generation via Web Crypto
• 📊 Entropy in bits with a strength grade
• ⏱️ Estimated crack time for each password
• 🗂️ Five passwords per generation, each with its own copy button

When you will use it

• Creating a password for a new account
• Replacing a password you have reused across many sites
• Generating an application secret or API key
• Setting a Wi-Fi or device password

Privacy: passwords are generated locally with Web Crypto — never transmitted, never logged. Store them in a password manager afterwards.

A password’s strength is its information entropy: length × log₂(alphabet size). With all four character sets enabled the alphabet has about 94 symbols, so:

• 12 characters ≈ 78 bits
• 16 characters ≈ 104 bits
• 20 characters ≈ 131 bits

Every extra bit doubles an attacker’s work — which is why sliding length up beats sprinkling in extra symbols.