The Password Generator creates passwords the right way: with the browser's cryptographic random source, unbiased character selection, a guaranteed character from every group you enable, and an honest entropy estimate with a strength label. Set a length from 6 to 64, choose uppercase, lowercase, numbers, and symbols, optionally exclude look-alike characters, and generate.
How It Works
Characters are drawn with crypto.getRandomValues using rejection sampling: random 32-bit values that would bias the result are discarded and redrawn, so every character in the pool is equally likely, unlike quick scripts that take a modulo of a random number and quietly favour the first characters of the set. One character is first taken from each selected group, guaranteeing the composition, the rest are drawn from the combined pool, and the whole password is then shuffled (Fisher-Yates with the same random source) so the guaranteed characters do not sit in predictable positions. Everything happens locally; nothing is transmitted or stored.
Entropy, in plain terms
With all four groups enabled the pool is 88 characters (26 + 26 + 10 + 26 symbols), so each character carries about 6.46 bits: a 12-character password has roughly 78 bits (Strong on this tool's scale), 16 characters about 103 bits (Strong), and 20 characters about 129 bits (Very Strong). The scale used here rates below 50 bits Weak, 50 to 75 Fair, 75 to 120 Strong, and above that Very Strong. Excluding ambiguous characters trims the pool to 83 and costs almost nothing: the same 16 characters still give about 102 bits.
Length beats cleverness
Entropy grows linearly with length but only logarithmically with pool size, which is why a long password of lowercase letters can outgun a short symbol salad: 20 lowercase characters (pool 26) give about 94 bits, comfortably above an 8-character all-groups password at about 52 bits. Site rules that cap length at 12 while demanding symbols have the priorities backwards. Generate the longest password the site allows, and let a password manager remember it; human-memorable patterns belong to passphrases, a different construction (several random words) that this generator does not make.
The ambiguous-character option
The characters 0, O, 1, l, and I are excluded when you tick the option: the set exists for passwords you must read aloud, type from a printout, or transcribe from a screen photo. The entropy cost is a fraction of a bit per character; the support-call savings are real. Leave the option off for manager-stored passwords, where no human ever reads the string.
Limitations
The generator creates the password; it cannot store it, sync it, or warn you when a site later leaks it. Entropy estimates assume the full pool is used uniformly, which the generation method enforces, but they say nothing about a password you then modify predictably. One password per account remains the rule: a 129-bit password reused on five sites is exactly as strong as the weakest site's database practices.
Frequently Asked Questions
Is a browser-generated password safe?
This one is generated locally with the operating system's cryptographic random source through the Web Crypto API, never sent anywhere, and not kept after you leave the page. That is the same primitive reputable password managers use.
Why does the generator guarantee one of each group?
Because pure randomness can produce, by chance, a 16-character draw with no digit, and many sites reject such passwords for missing a required class. The guarantee plus shuffle keeps composition rules satisfied without reducing entropy meaningfully.
How long should my passwords be?
At least 16 characters where a manager stores them, which this scale rates Strong; 20 or more for the master passwords and accounts (email, banking) that anchor everything else.