Loading page
About this tool
Generate random, highly secure passwords with advanced character controls, live strength scoring, and entropy estimates. Everything runs in your browser — nothing is stored.
Random Password Generator builds passwords of 8 to 128 characters using the browser's cryptographic random source (crypto.getRandomValues) with rejection sampling, so no character is more likely than another, then guarantees at least one character from every set you enabled and shuffles the result. It scores each password by true entropy — length x log2(pool size) — rather than by a checklist, so the default 24-character password drawn from uppercase, lowercase, digits and 26 symbols reports about 155 bits. Nothing is transmitted or stored: the password is generated in the page and disappears when you close it.
Open Random Password Generator on AltFTool — it loads instantly in your browser.
Drag Password Length anywhere from 8 to 128, then tick the Character Options you want: Uppercase (A–Z), Lowercase (a–z), Numbers (0–9) and Symbols (!@#$%).
Press Generate New; the Password Strength panel reports the entropy in bits and a crack-time estimate for that exact pool.
Press Copy Password to take the result, or the show/hide button to reveal it first.
Characters come from crypto.getRandomValues with modulo bias rejected, which is the difference between an unpredictable password and a guessable one.
One character is reserved from each selected pool before the rest is filled and the whole string is shuffled, so a password never silently misses the digit a site requires.
The strength readout shows the actual bit count for your length and character-set choice, so you can see that adding four characters beats adding one symbol type.
Aim for at least 60 bits of entropy and preferably 80 or more; with the default uppercase, lowercase, digits and symbols pool of 88 characters that is roughly 10 and 13 characters respectively. The generator defaults to 24 characters, about 155 bits, because anything you store in a password manager costs nothing extra to make longer.
They are entropy bands: under 40 bits is Weak, 40 to 59 is Fair, 60 to 79 is Strong and 80 bits or more is Very Strong. Entropy is calculated as the password length multiplied by log2 of the number of characters available, so it rises with both length and character variety.
No. Generation happens entirely in your browser tab with no network request, and the on-screen history exists only while the page is open — refreshing or closing it clears everything.
Turning off similar characters removes I, l, 1, L, O, o and 0 from every pool, which prevents transcription mistakes when a password has to be read aloud or typed from paper. It does shrink the pool and therefore the entropy slightly, so add a couple of characters to length to compensate.