loot.tools

Password Generator

Generate strong, configurable passwords in the browser. Choose length and character sets, and see an entropy-based strength meter for every password.

Configure length and character types, then generate a password. All processing runs in your browser.

Options
Output
Length16
 

How this generator works

The generator uses your browser's cryptographically secure random number generator (crypto.getRandomValues) to create passwords. Choose your length and which character sets to include: uppercase letters, lowercase letters, numbers, and symbols. The password is generated entirely in your browser and never sent anywhere.

What makes a strong password

Length matters more than complexity. A 16-character password with mixed case and numbers is stronger than an 8-character password with every symbol type. That said, including multiple character sets makes the password harder to crack by brute force. A 20-character password with all character sets enabled has enough entropy to resist any known attack method. The strength meter shows the estimated entropy in bits (length times log2 of the character pool size), which is the honest way to measure how hard a random password is to guess.

Tips

Use a password manager to store generated passwords - don't try to memorize random strings. Generate a unique password for every account. If a site limits password length or blocks certain symbols, adjust the settings here to match their requirements. For passphrases (easier to type on mobile), consider generating a longer password with just lowercase letters and numbers.