Generator
Passwords, UUIDs and random bytes, from the browser's own randomness.
Runs in your browser. Nothing is uploaded.
Everything here comes from the browser's cryptographic random source, the same one your bank's login page uses, rather than from anything that could be guessed by knowing when you pressed the button. Nothing is sent anywhere, nothing is logged, and nothing is remembered once the page is closed.
For passwords, choose which character sets are in play and whether lookalike characters are excluded — worth doing for anything that will be read aloud or typed off a screen. The entropy in bits is shown as you change the settings, which is the only honest measure of how strong a password is: length buys far more of it than punctuation does.
UUIDs are version 4, the random kind, generated by the browser itself. Random bytes come out as hex or Base64 in whatever length you ask for, which is what an API key, a signing secret or a salt actually is.
Step by step
- 1Pick what you need: a password, a UUID or raw random bytes.
- 2Set the length and how many you want.
- 3Copy one, or copy the whole list at once.
Questions
Is this random enough to trust?
Yes. It uses the Web Crypto API, which is the operating system's cryptographic random source, not Math.random.
Are the passwords sent anywhere?
No. They are made in this tab and never leave it. Close the page and they are gone, so copy what you need first.
How long should a password be?
Twenty characters or more from a mixed alphabet puts you past a hundred bits of entropy. The strength badge tracks the bits rather than counting symbol types.