96 · Productivity

Password Generator

Generate strong random passwords on your own device. Passwords are created with your browser’s secure random number generator and are never sent over the network.

Password Generator

Include

Generated on your device with the Web Crypto API. Never sent or stored.

How to use the password generator

  1. Choose a length — 16 or more characters is a good default.
  2. Pick the character types you need. Remove ambiguous characters if you will type the password by hand.
  3. Select Generate and copy the password straight into your password manager.

Why this generator is safe to use

Passwords are generated with the Web Crypto API (crypto.getRandomValues), the same source of randomness browsers use for encryption. The page uses unbiased sampling so every allowed character is equally likely, and it guarantees at least one character from each type you select.

No password is transmitted, logged or saved by CapyHelp. You can verify this by disconnecting from the internet after the page loads — the generator keeps working.

How strong is strong enough?

Strength is shown as an estimate of entropy in bits: the number of guesses an attacker would need grows by a factor of two for every bit. As a rough guide, 60+ bits is reasonable for most online accounts protected by rate limiting, and 80+ bits is a strong choice for important accounts. A 16-character password using all four character types is about 105 bits.

Length matters more than complexity. Use a unique password for every account, store them in a reputable password manager, and turn on two-factor authentication wherever it is available.

Examples

16 characters, all types

About 105 bits of entropy — very strong

12 characters, letters and numbers

About 71 bits of entropy — good

Questions

Are generated passwords stored anywhere?

No. Passwords exist only in this browser tab until you copy them. Closing or refreshing the page discards them.

What are ambiguous characters?

Characters that look alike in many fonts, such as O and 0, or l, I and 1. Excluding them makes passwords easier to read and type, at a small cost in strength that you can offset by adding a character or two.

Is a passphrase better than a random password?

Both can be strong. A random password packs more strength into fewer characters; a long passphrase of random words can be easier to remember. Either way, length and uniqueness are what matter most.