Random Password Generator

Generate strong random passwords with custom length and character sets, plus a live entropy estimate. Everything is generated locally — never transmitted.

How it works

• Every character is drawn with crypto.getRandomValues, the browser's cryptographically secure pseudo-random number generator (CSPRNG).
• Each generated password includes at least one character from every selected character set, then is shuffled so no set is predictable in position.
• Entropy is estimated as bits ≈ length × log₂(charset size) — the number of bits of uncertainty an attacker must brute-force.
• Generation happens entirely on your device; nothing is transmitted or stored.

About Random Password Generator

A strong password is unpredictable: each character multiplies the number of possibilities an attacker must try, so length and randomness matter far more than clever substitutions like "P@ssw0rd". This tool uses crypto.getRandomValues, a cryptographically secure random source, rather than Math.random, whose output is not designed for security and can be predictable. Entropy, measured in bits, expresses how much uncertainty the password holds — roughly the number of guesses needed to crack it.

Use this generator when creating a new account, an API key, or an encryption passphrase. For maximum safety, save generated passwords in a password manager instead of reusing memorable ones, avoid patterns like consecutive digits or keyboard runs, and prefer longer passwords over adding more symbols. Remember that random generation solves the guessing problem, but not the theft problem: on a compromised device or a phishing page, even a perfect password is useless.