Is this password actually random?

Yes. It's generated with the Web Crypto API's crypto.getRandomValues(), a cryptographically secure random number generator built into your browser — not Math.random(), which isn't suitable for secrets.

Is the password sent anywhere?

No. Everything happens locally in your browser with JavaScript. Nothing is transmitted, logged, or stored — closing the tab makes it disappear for good.

What does 'exclude ambiguous characters' do?

It drops characters that are easy to confuse when read or typed by hand, like lowercase l, uppercase I, the digit 1, uppercase O, and the digit 0. Useful for passwords you'll type manually or read off a screen.

How long should my password be?

Longer is stronger. 16+ characters with a mix of character sets is a solid default for most accounts; use the strength indicator below the password as a rough guide.

PASSWORD GENERATOR

Random, cryptographically strong passwords with the length and character set you choose — generated right here in your browser.

In short

Generate a random, cryptographically strong password with the length and character set you choose. Runs entirely in your browser using the Web Crypto API — nothing is sent anywhere or stored.

Password

xxxxxxxxxxxxxxxxxxxx

Strength: Very strong

Length20

Characters

Exclude ambiguous characters (l, I, 1, O, 0)

How to generate a password

1
Drag the length slider to the number of characters you want.
2
Toggle which character sets to include: lowercase, uppercase, digits, symbols.
3
Optionally exclude ambiguous characters like l, I, 1, O, and 0.
4
Copy the generated password, or click the refresh icon for a new one.

Questions

Is this password actually random?: Yes. It's generated with the Web Crypto API's crypto.getRandomValues(), a cryptographically secure random number generator built into your browser — not Math.random(), which isn't suitable for secrets.
Is the password sent anywhere?: No. Everything happens locally in your browser with JavaScript. Nothing is transmitted, logged, or stored — closing the tab makes it disappear for good.
What does 'exclude ambiguous characters' do?: It drops characters that are easy to confuse when read or typed by hand, like lowercase l, uppercase I, the digit 1, uppercase O, and the digit 0. Useful for passwords you'll type manually or read off a screen.
How long should my password be?: Longer is stronger. 16+ characters with a mix of character sets is a solid default for most accounts; use the strength indicator below the password as a rough guide.

Related tools

All Generators →

Updated August 6, 2026