Password Generator

Overview

This password generator creates random passwords entirely in your browser, with no network transmission. Choose which character sets to include, set a length between 1 and 100, and the strength meter updates in real time based on information entropy. Each password you copy is saved to a local history of up to 20 entries.

How strength is calculated

Strength is measured in entropy bits — a function of password length and character pool size. The tool's thresholds:

  • 64 bits or below: very weak
  • 65–80 bits: weak
  • 81–112 bits: moderate
  • 113–128 bits: strong
  • 128 bits+: very strong

Adding more character types has a large effect. A 16-character password using only lowercase letters (pool of 26) produces about 75 bits — weak. Enabling uppercase, digits, and symbols expands the pool to 74 characters and raises the same 16-character password to around 100 bits. Every additional character adds linearly to entropy.

The symbol set is fixed

The symbols this tool uses are !@#$%^&*()_+ — 12 characters. Some sites exclude certain symbols from passwords; if a site rejects your generated password, try disabling symbols and relying on length and mixed case to meet the strength requirement.

Standard accounts

  • 16 characters, uppercase + lowercase + digits
  • Covers forums, shopping accounts, subscriptions
  • Reaches moderate strength with full character set

High-security accounts

  • 20+ characters, all character sets enabled
  • Email, social media, financial accounts
  • 24+ characters for enterprise systems; rotate regularly

Using the history

The history stores passwords automatically after you click the copy button — not after generation. It holds up to 20 entries in browser localStorage. Clearing browser data clears the history. The history is useful for comparing candidates before committing to one, but it is not a substitute for a password manager.

What to do if all character sets are disabled

If you deselect all character types, the tool falls back to lowercase letters automatically so that generation can still proceed. Re-enabling other character sets is the better path for passwords with meaningful entropy.