Skip to the tools
All kits

Password generator

Set the length and which character sets to include, and get a strong password made from your browser's cryptographic random source. Turn off look-alike characters if the password has to be read aloud or typed from paper.

A strength reading shows the entropy in bits, worked out from the actual character set and length, not a vague weak-to-strong bar. Nothing is generated on a server, and nothing is sent anywhere.

Pick at least one character set

Strength very strong, about 129 bits of entropy from 86 possible characters.

Include

Made in your browser with a cryptographic random source. Nothing is generated on a server or sent anywhere.

Questions

Is what I paste sent anywhere?
No. Every tool in this kit runs in the page itself. There is no server here that receives what you paste, and you can check it in your browser's network tab: using a tool produces no request carrying your input at all.
Where does the randomness come from?
From crypto.getRandomValues, the browser's cryptographic random source, not from Math.random, which is not safe for secrets. Each character is drawn without bias across the sets you picked.
What does the strength number mean?
It is entropy in bits: the base-2 logarithm of the number of possible passwords, which is length times the log of the character set size. Each extra bit doubles the guesses an attacker needs. More than about 70 bits is strong for most uses; a longer password beats a more complex short one.
Is generating a password here safe?
The password is made in your browser and never leaves it, which you can confirm in the network tab: generating one produces no request. For your most important accounts, a dedicated password manager that also stores the password is worth using; this is for a quick strong password when you need one.

The other tools here