Skip to content
MaxyTools

Password Generator

Help: Password Generator

  • Passwords are drawn with your browser's secure random generator, and values that would skew the distribution are rejected: every character has exactly the same chance of coming up.
  • The password always contains at least one character from each ticked set. “Exclude look-alike characters” removes I, l, 1, O and 0, which are easy to misread or mishear.
  • A passphrase (5 or 6 words drawn from a list of over 1,000 words) is far easier to remember than a string of symbols, at a comparable strength.
  • Entropy in bits measures an attacker's effort: every extra bit doubles the number of guesses needed. Aim for at least 80 bits for an important account.
  • Nothing is sent or saved: copy the result into your password manager — it disappears when you leave the page.

How to use this tool

  1. Pick “Random characters” or “Passphrase”.
  2. Set the length (or the number of words) and the character sets you want.
  3. The result refreshes with every setting; “Generate a new one” draws another.
  4. Click “Copy” and paste it into your password manager.

Create truly random passwords and passphrases from 8 to 128 characters, with the entropy shown in bits. Everything happens in your browser.

Loading the tool…

How to use this tool

  1. 1

    Pick “Random characters” or “Passphrase”.

  2. 2

    Set the length (or the number of words) and the character sets you want.

  3. 3

    The result refreshes with every setting; “Generate a new one” draws another.

  4. 4

    Click “Copy” and paste it into your password manager.

Help

  • Passwords are drawn with your browser's secure random generator, and values that would skew the distribution are rejected: every character has exactly the same chance of coming up.
  • The password always contains at least one character from each ticked set. “Exclude look-alike characters” removes I, l, 1, O and 0, which are easy to misread or mishear.
  • A passphrase (5 or 6 words drawn from a list of over 1,000 words) is far easier to remember than a string of symbols, at a comparable strength.
  • Entropy in bits measures an attacker's effort: every extra bit doubles the number of guesses needed. Aim for at least 80 bits for an important account.
  • Nothing is sent or saved: copy the result into your password manager — it disappears when you leave the page.

Related guide : Strong passwords: entropy, passphrases and data breaches

Frequently asked questions

Is the password really random?

Yes. It is drawn with crypto.getRandomValues, your browser's cryptographic generator, not Math.random. Values that do not divide the byte range evenly are rejected so that no character is favoured.

How long should it be?

For a password kept in a manager, 20 characters mixing all four sets exceed 120 bits, which is beyond any attack. For one you must remember, choose a passphrase of 5 or 6 words.

Are my passwords sent or stored?

No. They are created on your device and vanish when you refresh or leave the page. No network request, no cookie, no local storage.

· Updated on

Similar tools