Skip to main content
FileForge

Password Generator

Create strong random passwords with control over length, symbols, digits and ambiguous characters. Generated locally with cryptographic randomness — never transmitted.

Runs in your browser — files never leave your device

Free · No sign-upOutputs Password
Loading tool…

How to use Password Generator

  1. Set the length — 16+ recommended, 20+ for important accounts.

  2. Choose character sets: lowercase, uppercase, digits, symbols.

  3. Click Generate (repeat until you're happy).

  4. Copy the password into your password manager.

About this tool

Password strength comes from length and true randomness, not from clever substitutions. This generator draws characters uniformly from your selected sets using the Web Crypto API, guarantees at least one character from each enabled set, and shows an entropy estimate so you can see how length changes strength. The "exclude ambiguous" option drops lookalikes (l/1/I, O/0) for passwords that must occasionally be typed by hand. Nothing is stored or sent — generation is entirely local.

This is worth reaching for any time you're creating a new account, resetting a compromised password, or setting up a shared credential like a Wi-Fi key — situations where a strong, unique, never-reused password matters most.

Common ways people use this

  • Creating a strong, unique password when signing up for a new account
  • Generating a new password after a service reports a data breach affecting your old one
  • Setting a Wi-Fi or shared device password that's strong but still readable if needed

Tips for better results

  • Save generated passwords into a password manager rather than trying to remember them — that's what makes long, random passwords practical to use everywhere.
  • Turn on "exclude ambiguous characters" specifically for passwords you expect to type by hand, like a Wi-Fi key you'll read off a screen to a guest.

Frequently asked questions

How long should my password be?
16 characters with mixed sets gives roughly 100 bits of entropy — beyond realistic brute force. Use 20+ for high-value accounts, and never reuse passwords across sites.
Is it safe to generate passwords on a website?
Here, generation runs in your browser with the Web Crypto API and the password is never transmitted or logged. You can verify by loading the page and disconnecting from the internet before generating.
Why exclude ambiguous characters?
Characters like l, 1, I, O and 0 are easy to confuse when a password must be read or typed manually (e.g. a Wi-Fi key). Excluding them slightly reduces entropy — compensate with a couple of extra characters.
Should every account really have a different password?
Yes — reusing a password means a breach at one site can compromise your accounts elsewhere. A password manager makes using a unique strong password everywhere practical.
What does the entropy estimate actually mean?
It's a rough measure, in bits, of how many attempts an attacker would need to guess the password by brute force. Higher is stronger; around 80+ bits is considered very strong for most purposes.

Related tools

Other tools people commonly use alongside this one.

UUID Generator

Generate version-4 UUIDs using your browser's cryptographic random source. Create one or a batch, with uppercase and hyphen-free formatting options.

Developer

Base64 Text

Convert text to Base64 and back. Unlike naive implementations, this handles UTF-8 correctly, so emoji and non-Latin text round-trip safely.

Developer

QR Code Generator

Create a QR code from any text or URL and download it as PNG or scalable SVG. No watermark, no expiry — the code is generated in your browser.

Developer