Utilarc

Strong password generator

Create strong random passwords with the length and characters you choose, and see how long they would take to crack. Everything runs in your browser; nothing is uploaded.

Very strong 102 bits of entropy · about over 1,000 million years to guess at 10 billion tries per second

How it works

Passwords are made with your browser's cryptographic random number generator (crypto.getRandomValues), with no bias toward any character. Each password includes at least one character from every type you tick. Nothing is stored or sent anywhere.

Good password habits

  • Use a different password for every site, stored in a password manager.
  • 16 characters with all types is strong for almost anything; use 20+ for email and banking.
  • Turn on two-factor authentication wherever it is offered.

Questions

Are these passwords really random?

Yes. They come from the operating system’s secure random source through the Web Crypto API, the same source used for encryption keys.

Do you see or save the passwords?

No. They are generated in your browser and never leave it.

What does "bits of entropy" mean?

It measures how many guesses an attacker would need. Each extra bit doubles the work; 80+ bits is beyond any practical attack.

Why avoid look-alike characters?

Characters like 0 and O or 1 and l are easy to misread when typing a password by hand. Removing them costs very little strength.

More tools