Password & Secret Generator
Generate strong random passwords and API secrets with a live entropy score. Choose length, character sets, and clarity options — everything runs locally in your browser.
Very strong — Safe against offline brute force.
Generated with crypto.getRandomValues — nothing is sent to a server.
Character pool
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_=+[]{};:,.?/
Pool size 86 characters
How to use
- Choose a length — 16+ characters for important accounts.
- Select the character sets you want in the pool.
- Copy the secret and store it in a password manager.
Reading the entropy score
Entropy is measured in bits. A 20-character password from all four sets gives about 130 bits — far beyond what any current attacker can brute force. Aim for 100+ bits for secrets and admin credentials.
Frequently asked questions
Why is length more important than complexity?
Modern attacks guess against a known pool and a fixed length. Every extra character multiplies the combinations, so a long passphrase often beats a short symbol-heavy one of the same length.
Can I use this for API secrets?
Yes. Pick length 32 or 64 with all four character sets. These secrets are generated in your browser, so nothing passes through a server.
Should I share generated passwords?
Never. Each password should be unique and stored in a password manager. Human memory is the weakest link — the machine should remember secrets, not people.
Related tools
Related tools
More from Developer Tools
Build custom software with us
From internal tools to full platforms — we deliver end to end.