How are passwords generated?

Using window.crypto.getRandomValues(), the browser's cryptographically secure RNG. This is the same primitive password managers like 1Password and Bitwarden use client-side. There's no JavaScript Math.random() here.

Are passwords stored anywhere?

No. Generation happens entirely in your browser. The page never sends generated passwords to any server, and there's no logging anywhere in the stack.

What length should I use?

20-32 characters with all sets enabled = ~130 bits of entropy, well past 'very strong.' For online accounts, 16+ chars is usually fine. For master passwords or encryption keys, go 32+. Don't go below 12 for anything that matters.

What does 'exclude similar chars' do?

Removes i, l, 1, L, o, 0, O from the pool. These look alike in many fonts. Use this if you'll ever read the password aloud or type it from paper. Slightly reduces entropy (~6 chars removed from pool) but doesn't meaningfully weaken passwords at 16+ length.

Why generate multiple at once?

So you can scan and pick one you can pronounce or visually like. Auto-generated 'random' passwords still have patterns the eye finds easier — having choices helps.

Password Generator

Generate cryptographically secure passwords in your browser. Adjust length (4-128), toggle uppercase / lowercase / numbers / symbols, optionally exclude ambiguous characters (i, l, 1, L, o, 0, O). Shows real-time entropy in bits with a strength label. Generate 1-20 passwords at once, copy with one click. Built on the Web Crypto API — no random number predictability, no server roundtrip, no logging.

Length: 20 characters

432 (default)128

Generate 5 passwords at a time

Entropy130 bits — Very strong

60+ bits is strong for online accounts. 80+ for high-value secrets.

Your passwords

🔒 Generated client-side with crypto.getRandomValues(). Nothing leaves your browser.

Frequently Asked Questions

How are passwords generated?: Using window.crypto.getRandomValues(), the browser's cryptographically secure RNG. This is the same primitive password managers like 1Password and Bitwarden use client-side. There's no JavaScript Math.random() here.
Are passwords stored anywhere?: No. Generation happens entirely in your browser. The page never sends generated passwords to any server, and there's no logging anywhere in the stack.
What length should I use?: 20-32 characters with all sets enabled = ~130 bits of entropy, well past 'very strong.' For online accounts, 16+ chars is usually fine. For master passwords or encryption keys, go 32+. Don't go below 12 for anything that matters.
What does 'exclude similar chars' do?: Removes i, l, 1, L, o, 0, O from the pool. These look alike in many fonts. Use this if you'll ever read the password aloud or type it from paper. Slightly reduces entropy (~6 chars removed from pool) but doesn't meaningfully weaken passwords at 16+ length.
Why generate multiple at once?: So you can scan and pick one you can pronounce or visually like. Auto-generated 'random' passwords still have patterns the eye finds easier — having choices helps.

Related Tools

Markdown Cheat Sheet

Interactive Markdown cheat sheet with live examples. Free Markdown syntax reference guide.

Regex Find & Replace

Find and replace text in Markdown using regex. Free online regex find and replace with live preview.

YAML Frontmatter Editor

Visual editor for YAML/TOML frontmatter. Free online frontmatter builder for Jekyll, Hugo, and Astro.

Transcript Cleaner

Clean up auto-generated transcripts, SRT subtitles, and raw captions. Remove timestamps, filler words, and speaker labels. Free online transcript cleaner.

About Password Generator

Free strong password generator. Customize length, character sets, and exclude similar characters. Uses crypto.getRandomValues — secure, browser-only, no logging. This tool runs entirely in your browser, so your content is not sent to a server. MarkdownMe provides free, fast, and reliable Markdown tools for developers, writers, and anyone who works with Markdown.