Password generator
Need a strong password? Choose a length and character sets or a passphrase of random words, generate one or many and copy them. Everything happens in your browser, and the passwords themselves are never stored. Create strong passwords or passphrases on your device. Pick a length and character sets, or switch to passphrase mode for random words, then copy one or all. The meter shows the entropy in bits and an estimated crack time. Passwords come only from crypto.getRandomValues and are never saved, exported or sent: saved settings, JSON, PDF and image contain only the settings.
How it works
- Choose password or passphrase mode and set the length or the number of words.
- Pick character sets, exclude look-alike characters or set a separator, capitalization and number for passphrases.
- Press Generate, check the strength meter, and copy one password or all of them.
Secure randomness, no shortcuts
Every character and every word is drawn with crypto.getRandomValues, the browser's cryptographic random generator, using rejection sampling so that each choice is exactly equally likely. The ordinary Math random function is never used. With Use every chosen set at least once, the password is guaranteed to contain a character from each set you picked, and the order is then shuffled with the same secure generator.
Entropy, strength and crack time
The meter shows entropy in bits: the length times the base two logarithm of the pool size for passwords, or the number of words times the logarithm of the 7776 word list for passphrases. Under 36 bits is weak, 60 bits is fair and 80 bits or more is very strong. The crack time assumes an offline attacker trying 10 billion guesses per second. Your passwords are never saved in this browser, and the JSON, PDF and image exports contain only the settings.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are created on your device with crypto.getRandomValues and are never sent anywhere, saved in localStorage or included in exports. Only your settings are saved, so the next visit uses the same options.
Password or passphrase: which is better?
Both are strong when long enough. A 20 character password with all sets has about 130 bits. A passphrase of 6 random words has about 77 bits and is much easier to type and remember. Use a password manager for most accounts and a passphrase for the few you must remember.
What does the clipboard auto-clear do?
After you copy, the clipboard is overwritten with empty text 30 seconds later while this page stays open, so the password does not linger. Browsers do not allow clearing it after the page is closed, so paste it right away.
Related tools
What makes a password strong
How strong passwords work: entropy in bits, why length beats complexity, the diceware passphrase method from 1995, NIST guidance on passwords and how long a modern attacker needs to crack them.
Lorem ipsum generator
A free lorem ipsum generator: placeholder text as paragraphs, sentences, words, list items or bytes, in classic Latin, the Cicero original or themed word sets, with HTML output, headings and a reproducible seed.
Text case converter
A free text case converter: UPPERCASE, lowercase, Title Case with language rules, Sentence case, camelCase, PascalCase, snake_case, kebab-case, CONSTANT_CASE, dot.case and URL slugs, plus cleanup for spaces, line breaks, bullets and emojis.
JSON formatter
A free JSON formatter and validator: beautify or minify JSON, find the exact line and column of an error, sort keys, browse a collapsible tree, copy paths and convert arrays to CSV, all in your browser.
Ready to try it?
Open PictorX in your browser — no install, no credit card required to start.
Go to Editor