How to Use the Secure Password Generator

Before You Start

Confirm the account's maximum password length and which symbols it accepts. Decide where you will save the result before generating it. A trusted password manager is normally the safest destination because the password should be unique and does not need to be memorized.

Choose the Password Length

Enter a whole number from 8 through 128 or move the slider. The default is 40 characters. Use the longest value the service accepts because length expands the possible random result space with every added character.

Select Character Types

Lowercase letters, uppercase letters, numbers, and symbols are enabled by default. The generator guarantees at least one character from every enabled type. Disable a type only when the receiving service rejects it. These controls describe the generator; they are not a recommendation that websites impose mandatory composition rules on people choosing passwords.

Choose Character Exclusions

Exclude ambiguous characters when you expect to read, dictate, or manually type the result. This removes look-alike and punctuation characters listed beside the option. Exclude brackets when a website rejects angle, round, square, or curly brackets. Each exclusion reduces the active pool and the modeled entropy slightly.

Use No-Repeat Mode Only When Needed

No repeated characters means a character can occur at most once. The requested length therefore cannot exceed the filtered pool size. This mode is useful for a rare service-specific restriction, but it is not generally required for password security and limits the available length.

Generate a Password

Select Generate password or submit the form with the keyboard. The browser validates the settings, requests cryptographically strong random values through Web Crypto, maps them to the filtered pool without modulo bias, and displays the result. Nothing is shown on initial page load.

Read the Password Results

• Password strength: a label based on modeled entropy bands, not an account-security guarantee.
• Password entropy: log₂ of the number of valid passwords available under the selected settings.
• Character pool: the number of characters remaining after exclusions.
• Length: the number of characters in the displayed password.

Copy and Save the Password Safely

Select the displayed password to copy it. After a successful copy, the visible result is immediately replaced with a newly generated password and the page announces that the previous value was copied. Paste the copied value into the intended account or a trusted password manager, clear clipboard history when appropriate, and do not reuse the password.

Common Password Settings

• Password-manager default: 40 characters with all four types, ambiguous characters excluded, and repeats allowed.
• Letters and numbers only: disable symbols when a service does not support them, then keep the password long.
• Manual entry: exclude ambiguous characters and brackets while using as much length as practical.
• No-repeat policy: enable no repeats only when the receiving system explicitly requires it.

Privacy, Assumptions, and Limitations

• The browser must provide a working Web Crypto getRandomValues implementation.
• The generator does not store passwords or place them in the URL.
• Clipboard contents can be exposed by other software or synced by the operating system.
• The tool does not check third-party password policies or known-compromised-password lists.
• The entropy estimate does not measure phishing, malware, insecure recovery, reuse, or storage risk.
• Use a purpose-built system for cryptographic keys, API keys, recovery codes, and regulated secrets.