A broad alphabet
Enable all four sets for a mixture of lowercase, uppercase, digits, and the displayed symbol collection. No particular class is guaranteed to appear in each password.
Password recipe
Generation assumptions
Each character is independently sampled from the combined alphabet. Selected sets are allowed, but a password need not contain a character from every set.
Alphabet size84
Theoretical entropy / password127.8 bits
Entropy = length × log₂(alphabet size), assuming uniform independent Web Crypto samples. This is not a cracking-time prediction.
Passwords are generated locally. Copy exports the real values even when masked; a downloaded text file is plaintext.
How to use the Password Generator
- 01
Choose a length from 8 to 128 and enable the character sets accepted by your service.
- 02
Optionally remove the listed lookalike characters, choose up to 20 passwords, and select Generate passwords.
- 03
Reveal, copy, or download the output deliberately, then clear it when finished.
Examples
Typing by hand
Exclude the listed ambiguous characters to reduce some transcription mistakes. The smaller alphabet also reduces the theoretical entropy at a fixed length.
Read the entropy formula
Twenty independently selected characters from an alphabet of 64 give 20 × log₂(64) = 120 bits under the uniform-sampling assumption.
Avoiding modulo bias
A raw random 32-bit word does not divide evenly into every alphabet size. This implementation rejects the incomplete high-end interval before taking a remainder, so each character has an equal number of source values. It uses the browser’s cryptographic random generator, not a seeded demo or Math.random.
Allowed sets and site policies
The selected sets define what may appear. The generator does not force at least one character from each set, because that would change the distribution and entropy assumptions. If a site requires a specific composition, review the generated value or use its approved password workflow.
Entropy has a specific meaning
The displayed number is length multiplied by log₂ of alphabet size. It assumes independent, uniform samples and no outside information about the password. It is not a prediction of cracking time, and it does not account for reuse, phishing, compromised devices, or how a service stores passwords.
What to know
- The minimum length is an interface bound, not a recommendation for every threat model. Entropy is a mathematical generation estimate, not a strength guarantee.
Common questions
Why are passwords initially hidden?
Masking reduces casual screen exposure. It does not encrypt the page’s memory, clipboard, or downloaded file.
Does selecting symbols guarantee a symbol?
No. Every position is independently sampled from the union of selected sets. A selected set is permitted, not mandatory.
Are generated passwords saved here?
The tool keeps them in page memory while displayed. It does not write them to local storage or URL parameters. Your clipboard and downloads have separate lifetimes.