Password Generator

This generator is for the moment you need a random password right now, for a new account, a router, a test environment. It draws every character independently from the categories you tick, with lengths from 6 to 32 and 1 to 20 passwords per click. It only generates. It never goes online, stores nothing, does not check whether a password appears in a breach list, and cannot remember it for you.

How to use it

1. Drag the "Password Length" slider (6 to 32, default 16).
2. Drag "Generate at Once" (1 to 20). Above 1 the page shows a list of passwords instead of a single one.
3. Tick "Uppercase", "Lowercase", "Numbers" and "Symbols" as needed; all four are on by default.
4. Click "Regenerate". Changing a slider or checkbox does not regenerate by itself, you must click again; one password is generated automatically when the page opens.
5. Use the copy button beside a password. A small line underneath shows the estimated strength.

What it really uses, and the character sets

Randomness comes from the browser's crypto.getRandomValues, a cryptographically secure source, not Math.random. For each position it takes a 32-bit random value and reduces it modulo the pool size; because 2^32 is vastly larger than the pool, the resulting bias is negligible. The sets are: 24 uppercase letters (I and O removed), 25 lowercase letters (l removed), the digits 2 to 9 (8 of them, with 0 and 1 removed) and 13 symbols: !@#$%^&*-_=+?. With all four ticked the pool holds 70 characters.

How the strength line is computed

"Estimated strength" is simply length x log2(pool size), rounded, assuming each position is chosen uniformly and independently. Pool size is the sum of the ticked categories using 24, 24, 8 and 13. So 16 characters with all four categories is about 98 bits and is labelled Strong; 12 characters with all four is about 73 bits, Medium; 16 digits alone is about 48 bits, Weak. The cut-offs are 80 bits and above for Strong, 50 and above for Medium, anything lower Weak. It is arithmetic on length and alphabet. It does not scan for dictionary words or patterns, which is fine here because the characters are genuinely random.

Range and known limitations

• Length is capped at 6 to 32 and the batch at 1 to 20. There is no custom character list, no exclude/append option and no passphrase mode.
• It does not guarantee at least one character from every ticked category. A 6-character password with everything ticked can come out with no symbol. If a site demands one of each, click again or check by eye.
• Look-alike characters (0, O, 1, l, I) are removed for easy copying; that shrinks the pool slightly, which the strength figure already accounts for.
• Untick all four categories and the box just shows a dash, with no warning message.
• The estimate counts lowercase as 24 although there are 25, which is marginally conservative and does not change the label.
• The symbol set has only 13 entries; if a site rejects some of them (for instance $ or %), untick Symbols or edit the result yourself.

FAQ: how long is long enough?

In the page's own scale 80 bits counts as Strong, and 16 characters with all categories already reaches roughly 98. With random passwords, length matters more than variety; for important accounts use 16 or more and keep them in a password manager.

FAQ: does the site record what I generate?

No. Generation happens in the browser, no request carries the password anywhere and nothing is written to local storage. Reload the page and it is gone, so copy it into your password manager straight away.

FAQ: why are 0, O, 1, l and I missing?

In many fonts they are easy to confuse when you copy a password by hand or read it aloud, so they are excluded. You lose a few possibilities per position, and can win the strength back by adding a character or two.

FAQ: will the same settings give the same password twice?

No. Each click draws fresh random values with no seed. Copy a password you want before you click again.

Privacy

Passwords live only in your browser's memory, are neither uploaded nor logged, and the copy button just writes to your system clipboard.