How it works
Choose a length from 8 to 128 and select at least one character set. Optionally exclude ambiguous characters such as I, l, 1, O, 0 and o. Click Generate password; each selected set is represented. Review length, the strength indication and pattern warnings; copy only when ready. To check another password, enter it in Strength checker. Clear removes both fields; no history is saved. Generation uses crypto.getRandomValues with rejection sampling and requires all selected sets. No Math.random fallback is used. The checker accepts at most 512 characters and flags short length, selected common words, repetitions, sequences and date-like patterns. Strength feedback is a conservative local heuristic, not an exhaustive dictionary, breach lookup or security certification. A long predictable password can be weak. Use unique passwords and a password manager; UUIDs and fast SHA hashes are not substitutes for password generation or secure password storage.
Interpret results and limitations
Generation uses crypto.getRandomValues with rejection sampling and requires all selected sets. No Math.random fallback is used. The checker accepts at most 512 characters and flags short length, selected common words, repetitions, sequences and date-like patterns. Strength feedback is a conservative local heuristic, not an exhaustive dictionary, breach lookup or security certification. A long predictable password can be weak. Use unique passwords and a password manager; UUIDs and fast SHA hashes are not substitutes for password generation or secure password storage.
Example
Use this example to understand the expected behavior before working with your own input.
Prefer a long randomly generated password over a familiar word followed by a year or punctuation.Continue your task
uuid generator — Continue with this related local tool.
SHA Hash Generator — Continue with this related local tool.
Frequently asked questions
Generation fails or a long password is marked weak?
Select a character set and use a supported HTTPS browser. Pattern warnings can keep a long password weak; generate a fresh random password rather than extending a predictable word.
Is my input uploaded or stored?
No. Processing and results stay in this tab. There is no input history or server processing. Copy and download are explicit actions.
Was this tool useful?
Votes are sent only when you allow usage analytics. You can also share feedback through Contact.