Password Generator, Strong, Random Passwords & Passphrases Online
Create truly random passwords with cryptographic entropy, or generate memorable word-based passphrases: with a live strength meter, exclude-look-alikes, guaranteed character classes and bulk output. 100% in your browser, nothing uploaded.
What is the password generator?
Creating strong passwords and memorable passphrases, the Password Generator uses cryptographic entropy and lets you control length, character sets, look-alike exclusion and guaranteed character classes, with a live strength meter and bulk output. Free and 100% in-browser, every password is generated on your device and never uploaded.
The GigAI Password Generator builds high-entropy passwords and passphrases entirely on your device using the browser's Web Crypto engine (the same cryptographically secure random source browsers use for TLS) so every character is drawn with real, unbiased randomness rather than the predictable Math.random() many web generators quietly rely on. Dial the length anywhere from 4 to 128 characters, toggle uppercase, lowercase, digits and symbols, optionally require at least one character from every set you enabled, and exclude visually ambiguous look-alikes like O/0 and l/1 that cause typos when read aloud or copied by hand. A live entropy readout and strength label update on every change, so you can see exactly how much guessing resistance you're buying. Prefer something you can actually remember? Switch to passphrase mode for diceware-style word combinations: four or more random words joined by a separator of your choice, which are long, memorable and brutally hard to brute-force. Need a batch for seeding accounts or fixtures? Generate up to fifty at once and copy them individually or all together. Because generation happens locally and nothing is ever transmitted, logged or stored, the passwords you create here are yours alone, close the tab and they're gone.
- Difficulty:
- Easy
- Typical time:
- ~15s
- Processing:
- 100% browser processing
Last updated
How to use the password generator
- 1
Pick a mode
Choose Password for a random character string or Passphrase for a memorable diceware-style set of words.
- 2
Set length & rules
Drag the length slider and toggle the character sets you want. Optionally require every set and exclude look-alike characters.
- 3
Check the strength
Watch the live entropy and strength meter update. Aim for at least 60–80 bits, and higher for accounts that matter.
- 4
Generate & copy
Generate one or a batch, then copy an individual password or all of them at once. Regenerate instantly if you want a different set.
What Password Generator includes
Cryptographically secure
Every character is drawn from crypto.getRandomValues with rejection sampling, so the distribution is unbiased and unpredictable. Never the guessable Math.random() weaker generators use.
Live entropy & strength meter
See the exact entropy in bits and a Very weak → Very strong label update as you change length and character sets, so you know how much guessing resistance you actually have.
Full character-set control
Toggle uppercase, lowercase, digits and symbols, and optionally require at least one from every enabled set so a password never accidentally drops a class.
Exclude look-alikes
Drop visually ambiguous characters like O/0, I/l/1 and S/5 to prevent transcription errors when a password is read aloud, printed or typed from a screen.
Memorable passphrase mode
Switch to diceware-style word passphrases (four or more random words with your choice of separator and capitalisation) long, high-entropy and genuinely easy to remember.
Bulk generate & copy
Produce up to fifty passwords at once for seeding accounts, fixtures or handovers, then copy them one by one or all together with a single click.
Why use our password generator
Trust the randomness
Web Crypto is the browser's cryptographically secure RNG. Unlike generators built on Math.random(), the passwords here can't be predicted by reconstructing a seed.
Strength you can see
The entropy readout turns 'is this strong enough?' into a concrete number of bits, so you can meet a policy or exceed a threshold with confidence instead of guessing.
Passwords people won't mistype
Excluding look-alikes and choosing readable separators makes generated secrets safe to dictate, print on a card or type from a second screen without errors.
Private by design
Nothing is uploaded, logged or stored. Generation is local and ephemeral, so the secret you create is never seen by us or anyone on the network.
Built for the way you work
From quick one-off fixes to daily workflows, see how people put this tool to use.
- Everyday user
A master password you can remember
Use passphrase mode to create a four-or-five-word secret that's easy to recall for your password manager but effectively impossible to brute-force.
- Developer / DevOps
Secrets for config and services
Generate high-entropy strings for database users, API service accounts and .env values, with symbols on and look-alikes off so they survive copy-paste and shell escaping.
- IT administrator
Bulk provisioning
Mint a batch of unique passwords for new accounts or device handovers, then hand each out individually: nothing ever leaves the machine you generated them on.
- Security-conscious team
Meet a password policy
Require every character class and a minimum length, and use the entropy readout to prove each credential clears the bit threshold your policy demands.
Supported formats
Everything is processed locally in your browser, your files never leave your device.
- Password
- Passphrase
- TXT
Frequently asked questions
Recommended tools
UUID Generator
Generate secure UUIDs instantly, random v4, time-ordered v7, or the nil UUID. Bulk-generate up to 1,000, copy or export as TXT/CSV, all in your browser.
Hash Generator
Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 checksums of any text or file at once, generate HMAC signatures with your own key, and verify a download against its expected hash, all in your browser, nothing uploaded.
JWT Decoder
Decode and inspect any JSON Web Token instantly. Read the header, payload and signature, see when it was issued and expires, and optionally verify an HS256 signature. 100% in-browser. Your token never leaves your device.
Base64 Encoder
Encode text or any file to Base64 instantly: Unicode-safe, with a URL-safe toggle and one-click data URLs. Runs entirely in your browser, nothing uploaded.
Barcode Generator
Generate scannable 1D barcodes (CODE128, EAN-13, UPC-A, CODE39, ITF-14, MSI, pharmacode and Codabar) live in your browser, with per-format validation and PNG or SVG export. Nothing is uploaded.
Base64 Decoder
Decode Base64 back to text or a file instantly: Unicode-safe, auto-detects URL-safe input, sniffs binary data and offers a download. Runs fully in your browser, nothing uploaded.
Common problems, solved
Hit a snag? Here are quick fixes for the issues people run into most.
The Generate button says to enable a character set.
In Password mode at least one of uppercase, lowercase, digits or symbols must be on: with everything off there's no pool to draw from. Toggle a set back on and it will generate immediately.
Require-each-class is disabled or greyed out.
That option only applies when the length is at least as large as the number of sets you enabled. You can't guarantee four classes in a three-character password. Increase the length and it re-enables.
My passphrase looks too short in characters.
Passphrase strength comes from the number of words and the size of the word list, not the character count. Four random words already give strong entropy. Add a word or two for high-value accounts.
A site rejected my password's symbols.
Some systems disallow certain punctuation. Turn symbols off (or regenerate) to get an alphanumeric password, or use passphrase mode with a hyphen separator, which nearly every system accepts.
Get the most out of it
Aim for 80+ bits of entropy for anything important, the meter tells you the moment you cross it.
Turn off look-alikes for any password you'll type by hand or read aloud to avoid O/0 and l/1 mix-ups.
Passphrases beat short random strings for memorability at the same entropy: great for master passwords.
Always store generated secrets in a password manager rather than reusing one strong password everywhere.
Use bulk mode to seed multiple accounts, but give every account its own unique password.
What's new
Recent updates and improvements to the password generator.
Initial release, crypto-secure password generation with length slider (4–128), character-set toggles, exclude look-alikes, require-each-class, live entropy/strength meter, bulk output and per-row copy.
Added diceware-style passphrase mode with word-count control, selectable separators, capitalisation and an optional trailing digit, plus keyboard shortcuts and a shareable options link.
Refined the strength thresholds, improved the require-each-class shuffle to stay unbiased, and added TXT export for bulk batches.
Keep exploring
Problems we solve
Definitions
From the blog
Explore categories
Common tasks
Your privacy is built in
Every password and passphrase is generated locally in your browser with the Web Crypto API, the same cryptographically secure randomness browsers use for encryption. Nothing is uploaded, transmitted, logged or stored: the tool has no server that could see your secret. Generation is ephemeral, so once you close the tab there is no trace left anywhere. It is safe to create even your most sensitive credentials here.
- Runs in your browser
- No uploads
- Nothing stored
Ready to try the password generator?
Free, private and instant. Password Generator runs right in your browser.