Live
Base64 Encoder and Decoder
Text to Base64 and back again
Password Generator
LiveGenerate genuinely random passwords with the length and characters you need, right in your browser.
-
20
Generated in your browser with crypto-strength randomness. It never leaves this page.
What it does
- Length slider and character-set toggles
- Optionally skip look-alike characters
- Strength meter as you tweak
Your files
It never leaves your device.
This one runs entirely in your browser. Nothing you type or drop here is sent to us, so there is nothing on our server to keep, and nothing to delete. It works offline once the page has loaded.
Frequently asked questions
Is this really random, or does it just look random?
Every character is drawn from the operating system's cryptographic random source through the browser, not from the ordinary random number generator that powers animations and shuffles. It also throws away and redraws any value that would fall in the uneven tail of the range, which is the quiet flaw in most hand-rolled generators: taking a random byte and folding it into an 88 character pool without that step makes the first few characters of the alphabet turn up slightly more often than the rest, forever, in a way no amount of looking at the output would reveal.
Can you see the passwords this makes?
No. Generating happens entirely in your browser and the result is never sent anywhere, so there is nothing on our server to store, leak or hand over. There is also no history on your side: pressing Generate replaces what was there and the previous one is gone, so copy it into your password manager before you make another. Once the page has loaded you can turn off the network and it still works.
How long should a password be?
Long enough that guessing it is hopeless, which with all four character sets switched on means about 16 characters and up. The page opens at 20 for that reason, and the slider runs from 6 to 64. Length buys far more than exotic characters do: adding one character to a 20 character password from the full set multiplies the work of guessing by 88, while swapping one letter for a symbol changes almost nothing. Six is offered because some old systems still refuse anything longer, not because it is a good idea.
What does the strength meter actually measure?
The size of the haystack, not the needle. It multiplies the length by how much each character could have been, so with all four sets on it reads 38.8 bits at 6 characters, 77.5 at 12, 103.4 at 16 and 129.2 at 20, and it labels those Weak, Good, Strong and Strong. Two things it cannot do: it does not know whether a password spells a word, so it scores a typed-in dictionary word exactly as it scores a generated one of the same length, and it does not check any breach list. It is only honest about passwords this page generated.
What does avoiding look-alikes remove, and what does it cost?
The characters that people misread off a screen or a printed card: lowercase i, lowercase l, the digit 1, capital L, lowercase o, the digit 0 and capital O. That takes the pool from 88 characters to 81, which costs about a tenth of a bit per character: a 20 character password goes from 129.2 bits to 126.8, and keeps its Strong label. Nothing worth worrying about, in other words. Turn it on for anything a person has to read out or type from a label, and leave it off when the password only ever travels by copy and paste.
Why does every password contain a symbol and a digit?
Because one character is drawn from each set you have selected before the rest are filled in, then the whole thing is shuffled so those characters do not sit at the front. That is there to satisfy the sites which demand at least one of each and reject an otherwise fine password. If a site refuses symbols, which some banks still do, untick that box rather than editing the result by hand: editing it breaks the guarantee and the strength meter would no longer describe what you have.