Davemi ToolsPassword Generator
Generate strong, cryptographically random passwords. Customize length, character types, and see real-time strength analysis — all in your browser.
Settings
Why use a password generator?
Humans are terrible at creating random passwords. We reuse them, base them on words, and make them predictable. A password generator creates truly random strings using cryptographic randomness (crypto.getRandomValues), eliminating the patterns that attackers exploit. Every password generated here runs entirely in your browser — nothing is stored or transmitted.
How to use this tool
- Adjust the length slider (16+ recommended).
- Toggle character types — uppercase, lowercase, numbers, symbols.
- Click New to regenerate, or Copy to grab it.
- Use Bulk Generate to create multiple passwords at once.
Password strength explained
| Rating | Entropy | Example |
|---|---|---|
| Weak | < 30 bits | 4-char numeric PIN |
| Fair | 30–49 bits | 8-char lowercase |
| Good | 50–69 bits | 10-char mixed case + numbers |
| Strong | 70–99 bits | 14-char all types |
| Very Strong | 100+ bits | 20+ char all types |
Best practices
- Use a unique password for every account
- Aim for 16+ characters with all types enabled
- Store passwords in a password manager, not your head
- Enable two-factor authentication wherever possible
- Never share passwords via email or messaging
Frequently Asked Questions
Is this password generator secure?
Yes. It uses the Web Crypto API (crypto.getRandomValues) which provides cryptographically strong random numbers. The passwords are generated entirely in your browser — nothing is sent to any server or stored anywhere.
What makes a strong password?
A strong password has high entropy — meaning it's long, uses a diverse character set (uppercase, lowercase, numbers, symbols), and is randomly generated rather than based on words or patterns. Aim for at least 16 characters with all character types enabled.
What does 'entropy' mean?
Entropy measures the unpredictability of a password in bits. A password with 80 bits of entropy means an attacker would need to try 2^80 combinations on average to crack it. Higher is better — 60+ bits is good, 80+ is strong, 100+ is very strong.
How is crack time estimated?
The crack time assumes a high-end offline brute-force attack doing 10 billion guesses per second. This is a worst-case scenario (e.g., cracking a stolen password hash with specialized hardware). Online attacks are much slower due to rate limiting.
What are 'ambiguous characters'?
Ambiguous characters are those that look similar in many fonts: I/l/1 (uppercase I, lowercase L, one), O/0 (letter O, zero), B/8. Excluding them makes passwords easier to read and type manually without mistakes.
Can I generate multiple passwords at once?
Yes. Use the 'Generate Bulk' option to create up to 50 passwords at once with the same settings. Each one is independently random.
Related tools
More free, private, browser-based utilities — no upload, no sign-up.