Random

Password Generator

Generate passwords from uppercase, lowercase, digits, and symbols. Set length and count, optionally hide ambiguous characters. Runs locally in your browser.

Password Generator

Generate passwords from length, count, and character-set switches.

ShareX LinkedIn Facebook

Output actions

Ready to copy output once your result appears.

Length, count, and character sets

Password Generator draws each character from crypto.getRandomValues and a charset you assemble. Length runs from 4 to 256 and opens at 20. Count runs from 1 to 50 and opens at 5. Uppercase, lowercase, digits, and a fixed symbol list can be combined, and Exclude ambiguous can strip 0, O, 1, l, and I. The page does not guarantee one character from each set.

How to generate passwords

1Set Length and Count. Out-of-range numbers are pulled back to 4–256 and 1–50. Clearing a field or typing 0 restores 20 and 5.
2Leave Uppercase (A-Z), Lowercase (a-z), Digits (0-9), and Symbols checked, or turn off the sets you do not want. Exclude ambiguous (0, O, l, I) is optional and also removes the digit 1.
3Click Generate passwords. Copy output copies every row, separated by line breaks. There is no download button. If every set is off, the page says Select at least one character set.

What it is good for

• Making a handful of account passwords with an explicit length and an explicit symbol list.
• Avoiding 0, O, 1, l, and I when someone will read the password aloud.
• Seeing that a batch can omit a character class, because no quota is enforced.

Example

Input

Length 20, count 1, all four sets on, Exclude ambiguous off

Output

N8!qz4V@p2Lm#1sT7wXc

That 20-character string is one legal draw from the default sets, not a value the button will repeat. Generate passwords replaces it with a new draw.

What goes into each character

Uppercase is A through Z. Lowercase is a through z. Digits are 0 through 9. Symbols are exactly !@#$%^&*()-_=+[]{}|;:,.<>? which is 26 characters. The sets you leave checked are concatenated in that order: uppercase, then lowercase, then digits, then symbols. All four together are 88 characters. Each output character is charset[uint32 % charset.length], and the uint32 comes from crypto.getRandomValues. The password length is the number of those draws.

Exclude ambiguous filters the concatenated string and deletes 0, O, 1, l, and I wherever they appear. The checkbox label lists 0, O, l, and I and does not mention 1, but the digit 1 is removed too. Symbols are untouched, because none of those five characters is in the symbol list. Uppercase plus the filter leaves 24 letters. Digits plus the filter leave 2 through 9.

Length, count, and the five switches

Length is a number input with a minimum of 4 and a maximum of 256 in the control, and the change handler clamps again. A value that does not parse, including an empty box or 0, is replaced with 20 before the clamp. Count parses the same way, with an empty box or 0 becoming 5, then clamps to 1 through 50. You cannot ask for 100 passwords or for a 3-character password; 3 becomes 4 and 100 becomes 50.

The five checkboxes start with the four sets on and Exclude ambiguous off. They are Uppercase (A-Z), Lowercase (a-z), Digits (0-9), Symbols (!@#…), and Exclude ambiguous (0, O, l, I). Turning all four sets off, even if Exclude ambiguous is on, leaves an empty charset and Generate passwords shows Select at least one character set. without writing rows. A later successful click clears that sentence.

Jobs for a batch of passwords

Use a count above 1 when you are issuing several accounts and you want each secret on its own line. Copy output joins those lines with newline characters. The rows are also shown in separate boxes on the page. Nothing here stores them, and the next click replaces the list.

The password strength checker scores a password you paste into it. Its symbol class is any non-alphanumeric character, and its point rules are its own. It does not know that this generator's symbol list has 26 characters, so treat its score as a second opinion, not as a replay of this charset. A random string that is not meant to be a password, with a custom alphabet, belongs on the random string generator.

Quotas, clamps, and the remainder

There is no rule that a password must contain at least one uppercase letter, one digit, or one symbol. With every set enabled, a length-4 result can still be four digits or four letters. If a policy needs every class, generate a longer value and check it, or keep clicking until the row satisfies the policy. The generator will not retry for you.

The modulo step has a small bias when the charset length does not divide 2^32. 88 does not. The bias is far smaller than the risk of a short password or a password reused from another site. This page does not use rejection sampling, and it does not claim each character is perfectly equiprobable. It also does not hash the password, salt it, or estimate crack time.

Copy output is available after a successful click and copies the full batch. There is no Download output button. Share links on the shell share the tool URL, not the passwords. Do not leave a generated password in a shared screenshot of the page.

Rules and limitations

Length clamps to 4–256 and defaults back to 20 when the field is empty or 0. Count clamps to 1–50 and defaults back to 5. The symbol characters are !@#$%^&*()-_=+[]{}|;:,.<>? and no others.

Exclude ambiguous deletes 0, O, 1, l, and I from the combined charset. No per-class quota is applied. Each character is a crypto.getRandomValues uint32 reduced modulo the charset length. Copy output copies the batch. There is no download.

Common problems

Select at least one character set. means the four set checkboxes are all off. Exclude ambiguous cannot supply characters by itself. Turn at least one set back on.

A password that is missing a digit or a symbol can still be a correct draw. Lengthen it or generate again if your policy requires those classes. A 1 that you expected to see was removed because Exclude ambiguous deletes 1 even though the label does not list it.

Frequently asked questions

Which characters can appear?

Uppercase A–Z, lowercase a–z, digits 0–9, and the symbols !@#$%^&*()-_=+[]{}|;:,.<>?. Only the sets you leave checked are used. The symbol list is those 26 characters, not every punctuation mark on the keyboard.

What are the length and count limits?

Length is 4 to 256 and starts at 20. Count is 1 to 50 and starts at 5. An empty field or 0 snaps back to 20 for length and 5 for count. A number past the maximum snaps to 256 or 50.

What does Exclude ambiguous remove?

It removes 0, O, 1, l, and I from the sets that are turned on. The checkbox text names 0, O, l, and I. The digit 1 is removed as well. Symbols are unchanged.

Will every password contain each selected set?

No. Characters are drawn independently. A short password can miss digits or symbols even when those boxes are checked. Generate again or raise the length if a policy requires every class.

Is my input uploaded or saved?

This tool processes input in your browser and does not save its input or output to local storage. Copy and download are user actions. The site uses analytics for page and action metadata and may use ads and production error reporting; see the Privacy Policy for those services.

About this tool

Maintained by Toolbench. For large or deeply nested files, split the input into smaller batches and verify representative results before using them in an import or application. Report reproducible problems through Contact.

Next steps