Password generator
A random password from the browser's secure generator. Nothing is stored or sent.
- Runs in the browser. The password is never stored, logged or uploaded.
- Characters are picked with the browser's cryptographic random generator, without bias.
- Every chosen kind of character appears at least once, so sites with composition rules accept it.
Questions
How long should a password be?
16 characters with all four kinds is far beyond what can be guessed or brute-forced. Longer matters more than stranger: each extra character multiplies the work for an attacker. Use 20 or more for anything that guards money or email.
What do the bits mean?
Entropy: the number of random choices the password hides, as a power of two. 80 bits or more is strong; every extra bit doubles the number of guesses needed.
Is it safe to generate a password on a website?
Here, yes: the password is made in this browser tab and no request carries it anywhere. Nothing is stored. Still, a password manager both generates and remembers, so a new password belongs in one the moment it is made.
Why skip I, l, 1, O and 0?
They look alike in many typefaces. Skipping them helps when a password is read aloud, typed from paper or entered on a TV. The password is only slightly weaker for it.
These tools are free and provided as they are. They are made with care, but they are not guaranteed to be free of errors or to suit every purpose, and they are used at the user's own responsibility. Please check the result before relying on it: scan the code, confirm the payment details, and where it matters ask the recipient or an adviser. To the extent permitted by law, Broken Logic Studio is not liable for loss or damage arising from the use of the tools.