Generate random passwords, grouped English letters, and numeric PINs locally with the browser’s secure random source.
Set generation rules
Generated result
Theoretical entropy: ≈ 128 bits
Generated only in this browser — never uploaded or stored.
Three explicit generation modes
Random password mode lets you control lowercase and uppercase letters, numbers, symbols, and ambiguous characters. Grouped letters creates fully random English-letter sequences without a dictionary or pronunciation pattern, making recovery codes, device codes, and temporary credentials easier to transcribe. PIN mode produces digits only.
Secure randomness, not casual pseudo-randomness
The generator uses secure values from the browser Web Crypto API and rejection sampling to avoid modulo bias when selecting characters. Random passwords contain at least one character from every enabled set. If secure randomness is unavailable, generation stops instead of falling back to Math.random().
Practical guidance
Use the default 20-character random password for accounts and create a unique result for every service;
If a site rejects symbols, disable symbols without also making the password much shorter;
Separators in grouped output improve readability but are not counted as random entropy;
Use PINs only with attempt limits, device lockout, or another authentication factor.
FAQ
Are generated passwords uploaded or stored?
No. Generation happens entirely in your browser. Results are never sent to the server or written to local storage. Copying does place the value on your operating system clipboard.
How are random passwords and grouped letters different?
Random passwords can combine lowercase and uppercase letters, numbers, and symbols. Grouped letters use random English letters only and add separators for easier transcription. They are not dictionary words and do not follow pronunciation patterns.
Why is uppercase-only grouped output available?
Some devices, recovery codes, and manual-entry workflows accept or work better with uppercase letters. Uppercase-only mode still selects uniformly from A–Z, but its alphabet is smaller than mixed case.
What does theoretical entropy mean?
The estimate uses the alphabet size and number of random characters to describe the search space. It does not account for a site’s password storage, rate limits, phishing, or device security, so it is not a promise about cracking time.
Why can a PIN start with zero?
Every position in a fixed-length PIN is selected uniformly from 0–9, including the first. Allowing a leading zero preserves the full search space. Generate another result if the target system rejects leading zeroes.
