Password Generator
Generate passwords with crypto.getRandomValues().
LocalYour data is processed locally in your browser and is not uploaded to Alphzen.
Random bytes come from crypto.getRandomValues(). There is no Math.random() fallback. The password is not stored or uploaded.
About 126.4 bits of entropy from a charset of 80 and length 20. Generated with a CSPRNG.
How to use
- Set the length and which character sets to include.
- Optionally exclude similar characters (0, O, I, l, 1).
- Generate. Copy from the result field — analytics never record the password.
Features
- Uses crypto.getRandomValues() with rejection sampling to avoid modulo bias.
- Refuses to generate if a CSPRNG is not available.
- Shows estimated entropy in bits from charset size and length.
- Does not store passwords or send them to a server.
- Does not claim to replace a password manager.
Examples
Length 20, upper, lower, digits, symbols
Entropy depends on the actual charset size after exclusions.
FAQ
Is this cryptographically secure?
The random bytes come from crypto.getRandomValues(), which is a CSPRNG in modern browsers. The password is only as strong as the length and character set you choose, and only if nobody is looking at your screen.
Why not Math.random()?
Math.random() is not appropriate for secrets. Alphzen will not fall back to it.
Should I hash this password here?
No. Send the password only to the service that will hash it with a proper KDF. Do not paste generated passwords into the Hash Generator as a storage method.
Related tools
About this tool
A usable password generator is a CSPRNG plus a character set plus a length. Everything else is presentation. Alphzen uses the Web Crypto API and will not emit a password if that API is missing.
Entropy shown on the page is an estimate: length × log2(charset size). It assumes independent uniform characters and no extra constraints from a site’s password rules.
Store the result in a password manager. This page is not an account vault.