Password Generator
Choose length, character sets, and whether to exclude look-alike characters (l, 1, I, O, 0). The password is drawn from the browser crypto.getRandomValues — already cryptographically secure on its own — and gains extra entropy from mouse movement and key-press timing, mixed in via SHA-256.
# processed in your browser. no request leaves this page.
How it works
Each password is built from crypto.getRandomValues bytes combined by XOR with a SHA-256-derived block of the accumulated state of mouse positions and key-press intervals. XOR with a uniform, independent value never reduces randomness — the final result is never worse than the system generator alone, and the extra entropy only adds when present.
- Configurable length and character sets, with look-alike character exclusion
- Cryptographic base via crypto.getRandomValues, already sufficient on its own
- Optional extra entropy, mixed via SHA-256 from mouse movement and key timing
- Strength meter in bits, generate by click or Enter, all local