Password Generator

Strong passwords and passphrases from the browser’s secure random source, with entropy.

Runs entirely in your browser. Nothing you type or paste is sent anywhere.

Made in your browser with crypto.getRandomValues. Nothing is stored or sent.

Options

Length20 characters

Uppercase (A–Z)Lowercase (a–z)Digits (0–9)Symbols

Symbols to use

Quotes, backslash and backtick are left out because they often break shells and config files.

Leave out look-alikes (I l 1 O 0 o)Use every chosen set at least once

How many5

Very strong

129 bits of entropy · pool of 90

About 1.7 × 10²¹ years to guess at ten billion guesses a second — a fast offline attack on a leaked, weakly hashed password.

Decode JWTs, explain the claims, check expiry and verify HMAC signatures locally.

Base64, Base64URL, URL, HTML entities, hex and Unicode escapes.

MD5, SHA-1, SHA-256, SHA-384, SHA-512 and HMAC for text or files.

Generate UUID v4/v7, ULIDs and nano IDs in bulk; decode the timestamp inside v7 and ULID.