Password Generator

A password generator is one of the most frequently used developer tools — signing up for services, generating API keys, configuring database credentials, creating SSH key pairs — every scenario demands strong, random passwords. This tool uses a cryptographically secure random number generator (crypto.getRandomValues) to create unpredictable passwords locally in your browser.

Customize character types (uppercase, lowercase, digits, symbols), adjustable length from 1-64 characters, and optionally exclude visually similar characters (0/O, 1/l). All passwords are generated client-side — nothing is sent to or stored on any server. Only you know your password.

📖 Password Generator Guide

Why Use a Password Generator?

Most human-created passwords are weak: common words (password123), personal info (birthdays, names), reused across sites, or simply too short. A good password generator uses a cryptographically secure pseudorandom number generator (CSPRNG) to produce truly random, unpredictable strings. This tool uses the Web Crypto API's crypto.getRandomValues() — even knowing all previous outputs, you cannot predict the next password.

Features

4 character types: Uppercase (A-Z), lowercase (a-z), digits (0-9), symbols (!@#$%^&*). Mix all for maximum password space.
Adjustable length: 1 to 64 characters. NIST recommends at least 8; 16+ for important accounts. Each added character exponentially increases cracking time.
Exclude similar chars: Removes 0/O, 1/I/l to avoid visual confusion. Useful for passwords you'll type manually (Wi-Fi passwords).
First char as letter: Some legacy systems require passwords to start with a letter. Not recommended, but the option is there.
Strength indicator: Real-time rating (Weak/Medium/Strong/Very Strong) based on length, character set size, and pattern detection.

Password Security Best Practices

Length > complexity: A 16-char lowercase password (26^16 ≈ 4.3×10^22 combinations) is far stronger than an 8-char all-character password (≈ 6.6×10^15). Add length before special characters.
Unique password per site: Use a password manager (Bitwarden, 1Password) with randomly generated passwords from this tool.
This tool stores nothing: Passwords exist only in browser memory and vanish when the page closes. Pair with a password manager — don't rely on copy-paste.