Use the Password Generator
Choose Random for character-based passwords or Memorable for word-based combinations. Set the controls, then use the copy button beside the result you need. The page creates an initial result on load, and generation runs in the browser with the Web Crypto API (crypto.getRandomValues).
Choose a generation mode
Select Random for passwords made from character classes. Select Memorable for combinations of randomly selected words with configurable formatting.
Configure Random mode
Use Length to choose 6 to 128 characters. Then select the character classes for the pool:
- Uppercase (A-Z)
- Lowercase (a-z)
- Digits (0-9)
- Symbols (!@#$...)
Enable Exclude ambiguous to remove characters such as l, 1, I, O, and 0. Set Count from 1 to 20. Leave at least one character class enabled; disabling all four leaves no pool for generation.
When Random mode runs, the script adds one character from each enabled class, fills the remaining positions from the combined pool, and shuffles the result.
Configure Memorable mode
Set Words from 3 to 8. Choose a Separator from six options: Hyphen, Underscore, Dot, Space, Digit, or None. Choose Digit to place a randomly generated digit between the generated words. The examples in the menu show the resulting format.
Use Capitalise first letter to capitalise the first letter of each generated word. Enable Append random number (0-99) to add a random number. Set Count from 1 to 10.
Generate and copy a result
- Choose Random or Memorable.
- Set the controls for the format and number of results you want.
- Changing the controls automatically updates the generated results.
- Use the individual copy button beside a result to copy it.
Understand the strength meter
The page displays one meter for the current generation settings, not a separate meter for every result in the batch. Its estimate uses the selected length and character pool in Random mode, or the word count and word-list size in Memorable mode. The Memorable value is a theoretical guide, not a per-output security rating; separators and capitalisation are handled separately from that estimate. For Random mode, the theoretical formula is length * log2(pool size).
- The displayed bits are a theoretical estimate of the possible output space.
- The meter does not guarantee a crack time or that a password meets a third-party site's rules.
Limits and privacy details
- Random mode supports lengths from 6 to 128 and up to 20 outputs.
- Memorable mode supports 3 to 8 words and up to 10 outputs.
- Random generation cannot run with every character class disabled because the pool is empty.
- The page script generates passwords client-side and does not send generated passwords to a server. The page does include analytics scripts, so the local implementation does not support a claim that no analytics or click data is transmitted.
- The tool does not document or guarantee compliance with arbitrary password rules on other sites.
Frequently Asked Questions
Is this password generator truly secure?
The page generates values in the browser with the Web Crypto API function crypto.getRandomValues. The local page script does not send generated passwords to a server, but the page also loads analytics scripts.
What is a passphrase and why is it more memorable than a random password?
A passphrase is a sequence of random words, such as maple-forge-dance-raven. Word groups are often easier to visualise and recall than a string of mixed characters. In Memorable mode, you choose the number of words, separator, capitalisation option, and whether to append a random number.
How long should my password be?
Random mode accepts a length from 6 to 128 characters. Memorable mode accepts 3 to 8 words. The strength meter shows a theoretical estimate based on the current settings; it does not provide a universal password-length rule.
What does 'Exclude ambiguous characters' do?
It removes characters that can look similar, including l, 1, I, O, and 0. This changes the Random character pool.
What do the entropy bits on the strength meter mean?
Entropy is a theoretical measure of the possible outputs for the current settings. For Random mode, the estimate uses length * log2(pool size); for Memorable mode, it uses the word count and word-list size. The meter is a guide, not a guaranteed crack-time or universal security rating.
Does this tool save my passwords?
The page script generates passwords in the browser and does not send generated passwords to a server. The local files do not establish retention or storage practices beyond the current page state, and the page includes analytics scripts.