DARINORCold Lab

Tools / Password Generator

Password Generator

Generate strong, random passwords with tunable character classes — all locally in your browser using the Web Crypto API. Nothing is ever sent to a server.

Estimated entropy:~129 bits — Very strong
Generated passwords
  • QVwz4[pQ>9[7%0Sa:ZSP#1

// About this tool

Password Generator

This password generator creates random passwords entirely in your browser using the Web Crypto API's cryptographically secure random number generator. Choose the length, which character classes to include (lowercase, uppercase, digits, symbols), and how many passwords to generate at once.

Every generated password is guaranteed to contain at least one character from each selected class, and the result is shuffled so the required characters aren't predictable. An entropy estimate in bits tells you how strong each password is against brute force.

Everything runs locally — nothing is uploaded, and the generator works fully offline. There is no server involved, so there is nothing to log and no rate limit.

// When to use it

  • Create a strong account password

    Generate a 20-character password with all four character classes and use it for a new account or a password manager entry.

  • Generate a batch for a team or test suite

    Generate several passwords at once and copy them all in one click for seeding test accounts or distributing credentials.

  • Avoid ambiguous characters

    Turn on 'Exclude ambiguous' to drop lookalike characters like I, l, 1, O, and 0 — useful when a password will be typed by hand.

// Questions

Is my password sent to a server?

No. Generation happens entirely in your browser using the Web Crypto API. Nothing is sent anywhere, and the generator works offline.

How is randomness generated?

The Web Crypto API's crypto.getRandomValues, which is cryptographically secure — not Math.random(). This is the same source browsers use for TLS key generation.

What does the entropy estimate mean?

Entropy is measured in bits: roughly log2(character pool size) × length. 80+ bits is generally considered strong for most purposes; the estimate assumes each character is chosen uniformly at random.

Can I generate more than 20 at once?

The UI caps the count at 20, but you can hit Regenerate as many times as you like — there is no server-side limit because nothing is uploaded.