Password Generator

Cryptographically secure (crypto.getRandomValues), generated entirely in your browser — nothing is sent or stored. Pick the rules a site demands and copy.

…

Length 20 lowercase a–z UPPERCASE A–Z digits 0–9 symbols !@#$%… avoid ambiguous 0O 1lI 5S 2Z 8B 6G… Generate at once

How strong is strong enough?

Entropy is the honest measure: each extra character multiplies the guesses an attacker needs. We show it live above.
60+ bits is fine for ordinary accounts; 80+ bits resists serious offline cracking; 100+ bits is overkill for almost everything.
Length beats complexity: a 20-character lowercase-only password (~94 bits) is far stronger than P@ssw0rd!.
Avoid ambiguous drops look-alike characters (0/O, 1/l/I, 5/S, 2/Z, 8/B, 6/G and quote/bracket symbols) so a password is safe to read aloud, write down, or type from a printout.
Use a password manager so every site gets a different one — reuse is what actually gets accounts hijacked.

Runs 100% in your browser — your passwords are never sent over the network or saved anywhere. Close the tab and they're gone.