Password Generator

Set a length from 4 to 128, choose which character sets to draw from — lowercase, uppercase, digits and symbols — and generate up to fifty passwords at once. An option excludes the characters people misread when copying by hand: capital I, lowercase l, the digit 1, capital O and the digit 0.

Randomness comes from crypto.getRandomValues, the browser's cryptographically secure generator, with rejection sampling so that every character in the chosen alphabet is equally likely. Math.random is not used anywhere; it is fast and predictable, which is the wrong pair of properties for a password.

The part that matters more than any of that: the password is generated in your own tab and is never transmitted. A password generated on someone else's server has already travelled the network and existed in their process before you ever saw it — and you have no way to check what they did with it. Nothing here is uploaded, and there is nothing to log.

Length beats complexity. A longer password from a smaller alphabet is generally stronger than a short one studded with symbols, and it is easier to type; if a site rejects symbols, add characters rather than giving up entropy.