Password Generator
Create strong random passwords locally with length and character controls
Generated password
Generated locally with a cryptographically secure random source.
Entropy
99.7 bits
Pool size
75
Est. crack time
Centuries+
Offline, ~10B guesses/sec
Options
Tune length and character rules, then generate again.
Options look good — generate when ready.
About this password generator
Create random passwords from 4 to 128 characters with toggles for uppercase, lowercase, numbers, symbols, optional character exclusions, and requirements that each selected set appears at least once. Passwords use crypto.getRandomValues. The page shows strength, entropy, and estimated crack time, plus Show/Hide, Copy, and Download.
How to use
- Set length between 4 and 128.
- Enable character classes (upper, lower, numbers, symbols) and optional exclusions or “require each selected type”.
- Generate a password and review strength, entropy, and crack-time estimates.
- Use Show/Hide as needed, then Copy or Download. Generate again for a new value.
Strength and entropy
Entropy summarizes how many bits of uncertainty the password draws from your chosen alphabet and length. Crack-time estimates assume offline guessing rates shown in the UI—they illustrate scale, not a promise about real attackers. A longer password with diverse characters generally scores higher.
Common uses
- One-off strong passwords for new accounts.
- Passphrases or high-entropy strings when symbols are allowed.
- Teaching how length and alphabet size affect entropy.
Tips
- Prefer length 16+ for important accounts when the site allows it.
- Use a password manager to store generated secrets—avoid reusing them across sites.
- If a site restricts symbols, disable symbols and increase length instead.
Privacy
Passwords are built locally with your browser’s random number source. They are not sent to ToolsArk. Clear the page or close the tab when finished on shared machines.
Limitations
- Generated passwords are only as safe as where you store them and how sites hash them.
- Crack-time display is illustrative; real threats include phishing and database leaks.
- Some sites reject certain symbols or max lengths—adjust toggles to match policy.
Frequently asked questions
Common questions about the Password Generator.
How does Password Generator work?
Choose length and character sets, then generate. Passwords are created with crypto.getRandomValues in your browser. You can copy, download as password.txt, show/hide, or regenerate.
Does my password leave my device?
No. Generation stays in your browser. ToolsArk does not upload passwords or call a remote generator API.
What options can I control?
Length from 4 to 128 characters. Toggle uppercase, lowercase, numbers, and symbols. Optional rules exclude similar characters, exclude ambiguous punctuation, avoid consecutive repeats, and require at least one character from each selected set.
How should I read the strength meter?
Strength is estimated from length and character-pool size (entropy), plus an illustrative offline crack-time at a fixed guess rate. It is not a full password-breach or pattern analysis, and it does not know if a password was reused elsewhere.
Is this safe for real accounts?
Use a unique password per account and store it in a password manager when you can. Prefer longer passwords with mixed character types. ToolsArk cannot guarantee that any password is unguessable against every attacker.
Tags
Continue with these utilities
People frequently use these utilities together.