Loading...
Generate cryptographically strong passwords with custom length and character sets, batch-generate several at once, and see the estimated entropy of each result so you know how strong your password really is — not just that it looks random.
Passwords are generated locally using your browser's cryptographic random source and are never transmitted, logged, or stored. That makes this generator safe for root passwords, database credentials, and anything else you would never trust to an online form.
For accounts protected by rate limits and lockouts, 12–16 random characters is strong. For high-value targets like disk encryption or database roots where offline brute-force is possible, use 20+ characters. Length beats symbol soup — a 20-character lowercase password outclasses an 8-character one with everything.
Entropy measures unpredictability in bits: roughly log2 of the number of possible passwords. The tool estimates it from your length and character sets. Each added bit doubles the work an attacker must do; 75+ bits is considered very strong against offline attacks.
Yes. Generation uses the browser's crypto-grade random source and happens entirely on your device. No password is ever sent to a server — you can verify by disconnecting your network before generating.
Random passwords are stronger per character; passphrases are easier to memorize and type. For anything stored in a password manager, use the random generator. For the few passwords you must remember, a 5–6 word passphrase is a good compromise.
PureKit · password · Free online tool — files processed locally in your browser, no upload.