Free tool · No sign-up
Password & Key Generator
Generate passwords, passphrases, and API keys from the browser's cryptographic random source — not Math.random, which is predictable and has no business near a credential. Tune length and character sets, read the real entropy in bits, or build a memorable multi-word passphrase instead.
Options
Character sets
Generated password
- Entropy
- 129 bits
- Strength
- Overkill
- Pool
- 88 chars
Method & assumptions
- Every character and word is drawn from crypto.getRandomValues, never Math.random, which is predictable and unfit for a credential.
- Selection uses rejection sampling, so no character is more likely than another — the naive modulo trick quietly biases toward the low end of the alphabet.
- Entropy is the honest figure: log2(pool) per character, or log2(wordlist) per word. It measures the generator, not any site's meter.
- A passphrase trades a longer string for something you can actually type and remember; six words from this list clear a comfortable bar.
- Everything is generated in your browser. No credential is transmitted, stored, or logged.
Plate —Other tools
More on the bench
- 01UUID Generatorv4 and v7, one or a thousand.
- 02Hash GeneratorSHA-256 and friends, from text or a file.
- 03Supabase Security AuditorPoint it at your project, find the holes.
- 04JWT DecoderPaste a token, read what is inside.
- 05Secret & .env ScannerPaste code or a .env, catch the leaked keys.
- 06Security Headers ScannerEnter a URL, grade its headers.
- 07CORS TesterSee exactly what a URL allows cross-origin.
- 08Base64 Encode / DecodeText or files, both directions.
Free diagnosticsSame-day dispatchNamed techniciansDone or free
Need it built, not just checkedWe write the software
We write the software
behind tools like these
Anyone who needs a credential with enough real randomness behind it to survive a guessing attack.