Password Generator
Strong passwords and API secrets from your browser's random number generator.
Runs entirely in your browser. Nothing is sent or stored.
Good to know
The password is created with crypto.getRandomValues, your browser's cryptographically secure random number generator. We use rejection sampling so every character is equally likely.
For accounts, 16 to 20 characters with all character types are enough. For API secrets and keys, use 32 characters or more.
Store passwords in a password manager, not in notes or spreadsheets.
Frequently asked questions
Is the password stored anywhere?
No. It is created in your browser and disappears when you close the page.
What does entropy mean?
How many guesses an attacker needs on average, expressed as a power of two. 80 bits is considered strong today, 128 bits very strong.
Why exclude look-alike characters?
Characters like l, 1, O and 0 look similar. Without them a password is easier to type by hand, at the cost of slightly less entropy.
More tools
JSON Formatter
Format, minify and validate JSON, with a clear error message.
Base64 Encode and Decode
Text to Base64 and back, UTF-8 safe and URL-safe if you want.
JWT Decoder
Read the header and claims of a JWT, with timestamps in plain language.
Unix Timestamp
Convert epoch seconds or milliseconds to a date and back.