ToolVaults

Strong Password Generator

Generate strong random passwords with configurable length, character sets, and ambiguity-avoidance. Live entropy meter shows crack time.

Runs 100% in your browser — nothing is uploaded.
Strength: Weak0 bits · instantly

How to use

  1. 1
    Choose a length

    16+ for anything you care about. 20+ if the site allows it.

  2. 2
    Pick character classes

    Uppercase, lowercase, digits, symbols. More classes = more entropy per character.

  3. 3
    Toggle "exclude ambiguous" if typing by hand

    Drops 0/O, 1/l/I and similar look-alikes.

  4. 4
    Generate and copy

    Hit Generate for a new one, then Copy. The entropy meter tells you how strong it is.

Examples

Everyday login (16 chars, all classes)
Input
Length 16 · a-z A-Z 0-9 symbols
Output
Kx8&pQ2@mV!nR3zB
~104 bits of entropy — safe against offline brute-force.
Vault master password (24 chars, all classes)
Input
Length 24 · a-z A-Z 0-9 symbols
Output
q7!Mv#kT9%eLp3@wJx8&nRz2
~156 bits of entropy — protects a vault of hundreds of other passwords.
Screen-friendly (20 chars, no ambiguous)
Input
Length 20 · a-z A-Z 0-9 · exclude ambiguous
Output
M7pxq3TnbrKvcF29eYuW
No 0/O, 1/l/I, so it types cleanly off a monitor. Slight entropy hit — still ~117 bits.

Frequently asked

Is my password sent anywhere?

No. Randomness comes from the browser Web Crypto API (crypto.getRandomValues) — cryptographic-grade, purely local. Nothing leaves the device.

What is entropy?

A measure of how unpredictable a password is, in bits. Every extra bit doubles the attacker's guess space. 80+ bits is safe against offline attacks by state-level adversaries.

What is "exclude ambiguous"?

Removes characters that look alike in many fonts (0/O, 1/l/I, |/`/'). Useful for passwords you'll type by hand from a screen.

Should I use symbols?

Yes — adds ~32 possible characters per position, roughly +2 bits of entropy each. Only skip them if a system rejects them (some legacy systems do).

Related tools