Question 1

How does this Password Generator create randomness?

Accepted Answer

Every character is drawn from the browser's cryptographic random source, crypto.getRandomValues(), rather than Math.random(). That API is seeded from the operating system's entropy pool and is what the same browser uses for TLS session keys, so the output is suitable for protecting real accounts. Characters are picked with rejection sampling so the distribution stays even.

Question 2

How long should a password be?

Accepted Answer

Sixteen characters with all four character sets enabled gives more than 95 bits of entropy, which is far beyond what any offline attack can realistically crack. For high-value accounts — email, banking, password manager master password — 20 or more characters is a comfortable margin. The strength meter in this tool reports the actual entropy in bits as you change the settings.

Question 3

Is this Password Generator free?

Accepted Answer

Yes. The Password Generator on Tools by tyup is completely free, has no signup, no ads and no usage limits. You can generate as many passwords as you need.

Question 4

Is my password uploaded or stored?

Accepted Answer

No. Passwords are generated entirely in your browser and exist only in the page's memory. Nothing is transmitted to a server, saved to storage or logged. When you close or reload the tab the password is gone, so copy it into your password manager before navigating away.

Question 5

Should I exclude ambiguous characters?

Accepted Answer

Excluding ambiguous characters removes il1LI|O0o, which look alike in many fonts. It is worth enabling when you will be reading the password aloud, copying it from a printed label or typing it manually, because it eliminates a common source of errors. The trade-off is a slightly smaller character pool, which the strength meter will reflect.

Question 6

Is a strong password enough?

Accepted Answer

A strong random password is essential but not sufficient on its own. Store every password in a dedicated password manager rather than reusing them, and enable two-factor authentication wherever it is offered — a leaked password is much less dangerous when a second factor is required to use it.

Password Generator Cryptographically strong passwords

About Password Generator

Explore more tools

Hash Generator

UUID Generator

QR Code Generator

Base64 Encoder

Browse all 27 tools