Password Generator

What modes does the password generator support?

This tool provides three generation modes: random passwords, passphrases, and PINs. They can be used for website accounts, password managers, temporary credentials, device PINs, and other scenarios that require random credentials. Each mode uses its own generation rules and strength model. Select a mode, configure its parameters, and generate one or more results.

Random passwords: customize length and character types

Random passwords support lengths from 4 to 128 characters, with 20 as the default. You can combine lowercase letters, uppercase letters, digits, and symbols. When "Exclude similar characters" is enabled, characters such as 0, O, o, 1, l, and I are excluded because they can be difficult to distinguish. When generating a password, every selected character type is guaranteed to appear at least once, and the characters are then shuffled using the same secure random source.

Passphrases: generate credentials from random words

The passphrase mode is useful when you want a random credential that is easier to read, type, or remember. You can select 3 to 10 random words and connect them with hyphens, underscores, periods, or spaces. You can also capitalize words or append a number or symbol, such as River-Lamp-Cactus or forest-27. Passphrases use a dedicated entropy model based on the number of words rather than treating every character as if it came from a conventional password character set.

PINs: generate random numeric PINs

The PIN mode generates numeric credentials with lengths of 4, 6, 8, or 10 digits. You can enable "No sequential digits" and "No repeated digits" to reduce simple combinations such as 123456, 654321, and 111111. PINs use a dedicated numeric combination model for theoretical entropy and do not use the character-type checks designed for random passwords.

How should password strength and entropy be interpreted?

Random passwords display a strength level, theoretical entropy, and checks for uppercase letters, lowercase letters, digits, symbols, sequential characters, repeated patterns, and common weak passwords. Passphrases and PINs use their respective entropy models and display a mode-specific explanation in the result area. The theoretical entropy represents the size of the random search space; it is not a guarantee of actual security or a direct estimate of cracking time. Predictable patterns can reduce practical security.

Why use cryptographically secure random numbers?

The generator uses the browser's crypto.getRandomValues() API to obtain cryptographically secure random data and uses rejection sampling to avoid distribution bias caused by simple modulo operations. It does not use Math.random(), timestamps, or predictable combinations such as a username and timestamp. Random passwords are also shuffled after satisfying the selected character-type requirements so that a particular character type does not always appear in a fixed position.

How do I generate and copy multiple passwords?

All three modes support batch generation, with up to 50 results per run. After generation, each result can be copied individually, or all results can be copied at once. Results can also be exported as a TXT file. Changing the length, character types, word count, PIN rules, or other parameters does not automatically replace existing results. Click "Generate" or "Regenerate" to create new results using the updated parameters.

Are generated passwords uploaded to the server?

Generation and strength analysis are performed entirely in the current browser page, so passwords do not need to be sent to the server. The tool does not write generated results to the URL, localStorage, sessionStorage, or cookies. Refreshing or closing the page clears the current results. For long-term storage, use a password manager rather than chat history, plain text files, or email.

Which mode should I use?

For website accounts and other credentials that require high randomness, use random password mode with an appropriate length and character set. For credentials that are easier to read or type, use passphrase mode. For devices or systems that accept digits only, use PIN mode. Always follow the length and character requirements of the system or website where the credential will be used.