Password Generator

Yes. This tool uses the Web Crypto API (crypto.getRandomValues) to generate cryptographically secure random numbers in your browser. No passwords are transmitted, logged, or stored on any server. All generation happens locally on your device.

A strong password is long (at least 12–16 characters), uses a mix of character types (uppercase, lowercase, numbers, symbols), and avoids predictable patterns or dictionary words. Entropy — measured in bits — quantifies password strength. 80+ bits is considered strong; 128+ bits is extremely strong.

This option removes visually similar characters like lowercase 'l', uppercase 'I', the number '1', uppercase 'O', and the number '0' from the password pool. It helps avoid confusion when reading or manually typing passwords.

A memorable passphrase combines random dictionary words with a separator and a number suffix (e.g., 'tiger-melon-cloud-42'). Passphrases are often easier to remember than random character strings while still being secure due to their length. The diceware method generates them using random word selection.

Strength is estimated by calculating entropy: log2(charsetSize ^ length), where charsetSize depends on which character types are used (26 for lowercase, 26 for uppercase, 10 for digits, ~32 for symbols). The crack time estimate assumes an attacker can try 100 billion guesses per second.

Yes. Use the Bulk tab to generate up to 100 passwords simultaneously. You can copy the entire list or download it as a text file. This is useful for setting up multiple accounts or generating temporary credentials.

Password history is kept only in your browser's memory for the current session. It is not saved to localStorage, cookies, or any server. Refreshing the page or closing the tab will clear the history completely.

When you select multiple character types (e.g., uppercase + numbers), the generator guarantees the password contains at least one character from each selected set. This prevents the rare chance that a random password accidentally omits a required character type.

For most online accounts, 12–16 characters is sufficient. For high-security applications (banking, encryption keys, master passwords), use 20–32 characters. The slider goes up to 128 characters for specialized use cases like API keys or database passwords.

No. This password generator runs entirely in your browser. The Web Crypto API generates randomness locally. No passwords, settings, or usage data is transmitted, logged, or stored externally. You can safely generate passwords for the most sensitive systems.