Your next password, impossible to guess.
Generate truly random passwords using the browser's cryptographic RNG. Pick length, charset (uppercase, numbers, symbols), or a memorable passphrase mode. Everything happens locally — the password never leaves your browser.
Options
Drops look-alike characters: I l 1 O 0 o.
Your password
Strength
~104 bits of entropy · very strong
100% local generation — the password never leaves your browser and isn't stored.
What it does
- Cryptographic randomness (crypto.getRandomValues, not Math.random)
- Configurable length 8–128 characters
- Toggle uppercase, lowercase, numbers, symbols
- Memorable mode: 4–6 words like "correct-horse-battery-staple"
- Strength indicator (entropy in bits)
- Copy button — nothing kept in history
Use cases
- New accounts without firing up a manager
- Server root password
- Dev API keys and secrets
- Replacing a password leaked in a breach
- Guest WiFi passcode
FAQ
How random is it?
We use crypto.getRandomValues() — a CSPRNG (cryptographically secure). No bias like Math.random(). For 16 characters with all charsets, that's ~96 bits of entropy.
Why "memorable" mode if random is stronger?
A 5-word passphrase from a 7,776-word dictionary (Diceware-style) has ~64 bits of entropy and you can remember it. Stronger than many "random" 8-char passwords.
Do you store it?
No. 100% local generation. Close the tab and it's gone. We have no server that could see it.
Can I trust this?
Code is open source — verifiable. And since it's local, you can cut WiFi after loading the page and keep generating offline.