A password generator that draws every character alone
With all four character sets on and a length of 8, roughly 4 in 10 passwords from this password generator contain no digit. The reason is simple. The tool picks each character on its own from one combined pool, so no set is guaranteed a place. The length runs from 8 to 64 characters and starts at 20.
Five steps from slider to clipboard
- Move the length slider. The label next to it shows the exact count.
- Switch uppercase letters, lowercase letters, numbers and special characters on or off. All four start on.
- Turn on Avoid ambiguous characters if someone has to read the password aloud or copy it from paper. It removes I, O, l, o, 0 and 1.
- Check the strength bar and the bit count under the field. Every change creates a new password. Press New to draw another one.
- Press Copy. The batch list on the right holds five more candidates.
Settings for a Wi-Fi card, a staging database and an old login form
- Printed guest Wi-Fi card: use the ambiguous-character option, so nobody has to guess between a capital I and a lowercase l.
- Database user on a staging server: slider at 64, all four sets on. Nobody types it by hand anyway.
- An old system that accepts 12 characters at most and no symbols. Set the length to 12 and turn special characters off. You still get about 71 bits.
The special characters come from a fixed list of 26: !@#$%^&*()_+-=[]{}|;:,.<>? There are no quotes, slashes, tildes or spaces. If a site rejects one of them, turn the whole group off.
If a site demands a digit
Press New or raise the length. If you switch off all four sets, the tool falls back to lowercase letters, although the boxes stay unchecked.
What the strength label says, and what the page keeps
The label looks at entropy only. Under 40 bits is weak, under 65 medium, under 90 strong, and above that very strong. It rates the password on screen, not one you typed. There is no passphrase mode and no history.
The random characters come from crypto.getRandomValues in your browser. Pressing a button or moving the slider sends no request, and the network panel of your developer tools shows this. The page stores nothing, so a reload clears the password and the batch list. Copy writes to the clipboard, so a clipboard manager on your device may keep a copy.