Password Generator
Create cryptographically random passwords, numeric PINs and word-based passphrases entirely in your browser. Customise length, character sets, exclusions and quantity, examine estimated entropy and possible combinations, then copy or export your results without server-side storage.
Estimates assume a uniformly random selection. Real-world account security also depends on unique passwords, secure storage and multifactor authentication.
Table of Contents
Highlights
- Cryptographically secure, browser-based random generation
- Random passwords, numeric PINs and word passphrases
- Adjustable character sets, lengths and exclusions
- Live strength, entropy and combination estimates
- Batch generation with copy and TXT, CSV or JSON exports
How Password Generator Works?
Random-character passwords draw characters from the selected uppercase, lowercase, digit, symbol and optional custom sets. Excluded and similar-looking characters are removed before generation. The browser's crypto.getRandomValues() supplies random values, while rejection sampling avoids modulo bias. When the option to use every enabled set is selected, one character is picked from each usable set and all characters are shuffled.
For a pool of A distinct allowed characters and a password length L, the tool displays an estimated combination count and entropy:
For numeric PINs, A = 10. For word passphrases, W words are selected independently from the tool's built-in list of D words; adding a random final digit multiplies the possibilities by ten.
Here d is 1 when the extra digit is enabled and 0 otherwise. Separators and capitalisation are fixed presentation choices, so they do not add entropy.
| Mode | Configurable choices | Displayed estimate |
|---|---|---|
| Random characters | 4–128 characters; selected and extra sets; exclusions; optional use of every set | Pool size raised to password length |
| Numeric PIN | 4–128 digits | 10 raised to PIN length |
| Word passphrase | 3–12 words; separator, capitals and optional final digit | Word-list size raised to word count, times ten if enabled |
Generate between 1 and 50 results per batch. The displayed strength labels use entropy thresholds: under 40 bits is Weak, 40–59.9 Fair, 60–79.9 Strong and 80 bits or more Very strong.
Practical Use Cases
Personal account holders: Generate different random passwords for email, shopping and social accounts, choosing lengths and symbols that each service accepts.
IT administrators: Produce a batch of temporary passwords, require characters from each selected group and omit easily confused characters when credentials must be communicated.
Developers and testers: Use custom allowed characters or exclude unsupported punctuation to create test credentials that match a form's acceptance rules.
People who prefer memorable secrets: Select multi-word passphrases with a preferred separator, optional word capitalisation and an additional random digit.
Device users: Generate numeric-only PINs at the length supported by a lock screen or access system.
Accuracy and Limitations
The generator uses the browser's cryptographic random-number API and unbiased index selection, but its displayed entropy is a theoretical estimate, not a measured resistance to attack. When at least one character from every selected set is required, the displayed pool-size formula does not model the actual constrained distribution and can overstate entropy and valid combinations. The word mode draws from a relatively small, fixed built-in list, not a comprehensive dictionary; capitalisation and separators do not increase randomness. PIN estimates assume independently chosen digits and do not account for lockout policies. Strength labels ignore breaches, reuse, phishing and real-world attacker knowledge. Copying or exporting secrets may expose them to clipboard history, saved files or other software, although the tool itself has no server-side storage.
