KitJade
Developer ToolsRuns in your browser

Password Generator

Cryptographically secure passwords with entropy scoring.

Use the Password Generator tool

Runs in your browserUpdated Report a problem

What this password generator does

Password Generator creates random passwords using the browser's cryptographically secure random number generator, with rejection sampling so every character is uniformly likely. Nothing is sent over the network, and nothing is stored after you close the tab.

The generator reports an entropy estimate in bits. That number measures unpredictability, not how long a site will resist guessing — rate limits and account lockouts matter too. For most accounts, 80 bits or more is a sensible target.

Why use it

  • Create a unique password for every account instead of reusing one.
  • Generate credentials that avoid look-alike characters such as O/0 and l/1.
  • Check whether a proposed length actually gives you enough entropy.

How to use it

  1. 1Set the length (16 characters is a good default).
  2. 2Choose uppercase, lowercase, digits and symbols.
  3. 3Optionally exclude ambiguous characters and enforce at least one of each selected set.
  4. 4Copy the password into your password manager. Do not email or message it.

Worked examples

Balanced 20-character password

Input

Length 20 · upper + lower + digits + symbols

Output

7q!R2v#Lm9@Xc4Tz&b1K

About 131 bits of entropy. Store it in a password manager — never reuse it.

Common mistakes

  • Using Math.random()-based generators, which are predictable and unsuitable for secrets.
  • Generating a strong password and then reusing it across sites.
  • Assuming symbols always help: length increases entropy faster than a larger alphabet.

Frequently asked questions

Is this password generator actually secure?
It uses crypto.getRandomValues with rejection sampling, which is the browser's CSPRNG. The generated value never leaves the page, which removes the biggest risk of online generators.
How long should my password be?
16 random characters is strong for most accounts. Use 20 or more for password-manager master passwords, email, banking and admin accounts.
Should I use a passphrase instead?
A randomly generated multi-word passphrase can be both strong and memorable. The key word is randomly: four to six words chosen by a CSPRNG are far better than a quote you invented.

Related tools

All tools

UUID Generator

Bulk random UUID v4 generation with format options.

Runs locally

Hash Generator

MD5 and SHA digests for text or files, computed locally.

Runs locally

JWT Decoder

Read JWT claims and optionally verify HMAC signatures.

Runs locally

JSON Formatter

Beautify or minify JSON, with precise error positions.

Runs locally