Password Generator
Make a strong, random password in one click. Tune the length and the character sets, watch the strength estimate update, then copy it — everything happens on your device.
Settings
Output
Crack time assumes an attacker trying ten billion guesses per second — fast hardware, worst case for you.
How it works
Each character is drawn with your browser's secure random generator (crypto.getRandomValues), the same source of randomness the browser itself trusts. To keep the draw fair, the generator uses rejection sampling: if a random number falls in the small "biased tail" at the top of the range, it's thrown away and drawn again, so no character is ever favoured.
The entropy figure is the size of the search space an attacker faces: length × log₂(characters available). The crack-time estimate then assumes the attacker knows your exact recipe (length and character sets) but not the result — that combination is the honest worst case.
One honest limitation: the math only describes how hard the password is to guess. A 30-character password pasted into a computer you don't control, or reused across five sites, is already compromised no matter how it was generated. Length protects the secret; only you can keep it secret.