Developer Tools
Create unique passwords from selected character groups with cryptographically secure browser randomness. Control length, exclude ambiguous characters, copy the result, and review a careful strength and entropy estimate without storing or transmitting the password.
Simple workflow
How to use Password Generator
- 1Choose a length from 8 to 128 characters.
- 2Select lowercase, uppercase, numbers and symbols, with optional ambiguous-character exclusion.
- 3Generate, copy and save the password in a trusted password manager.
Good to know
Frequently asked questions
How is randomness generated?
The generator uses crypto.getRandomValues(), rejection sampling and a secure shuffle. It never uses Math.random().
Will every selected group appear?
Yes. At least one character from every selected group is included before the characters are securely shuffled.
Is the entropy number exact?
It is a defensible estimate based on password length and the available pool. Real security also depends on unique use, safe storage and how a service protects passwords.
Does UtilSprout store generated passwords?
No. Passwords are not uploaded, logged, placed in URLs or saved in localStorage.
Practical guide
Create a long, unique password with browser cryptography
Length and uniqueness matter because password reuse lets one breach unlock several accounts. Choose character groups a site accepts, then store the result in a reputable password manager rather than memorising or reusing it.
Generation uses crypto.getRandomValues(), unbiased index selection and a secure shuffle. The displayed entropy estimate describes the configured character pool; it is not a guarantee that any password is unhackable.
Worked example
Create a password for a new account
- Start with
- A site accepts at least 16 characters, letters, numbers and symbols.
- Choose
- Choose length 20, keep all four groups enabled and exclude ambiguous characters.
- You get
- The result contains every selected group and exists only in the current page until you copy or clear it.
Tips for a useful result
- Use a different generated password for every account.
- Prefer 20 or more characters when a service permits it.
- Use multi-factor authentication for important accounts in addition to a strong password.
What stays local
Generated values are not stored in localStorage, added to URLs, included in analytics or transmitted to a server. Clearing the result removes it from the page state.
Keep going