Generate random v4 or time-ordered v7 UUIDs in bulk, in the format you need.
Password Generator
Create strong random passwords or passphrases using your browser’s secure random generator.
Generated on your device with Web Crypto — never sent anywhere
How it works
Every character (or word) is chosen with crypto.getRandomValues, your browser’s cryptographically secure random number generator, using rejection sampling so no character is more likely than another. Passwords always include at least one character from each type you select, then are shuffled.
Strength is estimated as entropy: length × log₂(size of the character set) for passwords, or words × log₂(size of the word list) for passphrases. The word list is built in, and its size is counted honestly in the estimate.
- Use a password manager so every account can have a long, unique password.
- Use a passphrase for the few passwords you must remember.
- Turn on two-factor authentication for email, banking and social accounts.
Example
A 20-character password using upper- and lowercase letters, numbers and 25 symbols draws from 87 characters: 20 × log₂(87) ≈ 129 bits — far beyond what can be brute-forced. A 6-word passphrase from the built-in list plus a number gives roughly 55–60 bits: fine with two-factor authentication and rate limiting, but use more words for something like a password-manager master password.
Frequently asked questions
Is this password generator safe?
Passwords are generated on your device using the Web Crypto API (crypto.getRandomValues), the browser’s cryptographically secure random number generator. Nothing is sent over the network or stored by ToolTarvern.
How long should my password be?
Longer is stronger. For accounts you store in a password manager, 16 or more random characters is a sensible choice. For a password you must remember, a passphrase of several random words is easier to type and recall.
What does “bits of entropy” mean?
Entropy estimates how many guesses an attacker would need if they knew exactly how the password was generated. Each extra bit doubles the work. It only applies to truly random passwords like these — not to passwords people make up.
Should I reuse a strong password?
No. Use a different password for every account, ideally stored in a password manager, and turn on two-factor authentication wherever it is offered.
Related tools
Make QR codes for links, text, Wi-Fi, email, phone and WhatsApp. Download PNG or SVG.
Generate placeholder paragraphs, sentences or words, as plain text or HTML.
Turn titles into clean, lowercase, hyphenated URL slugs — accents and symbols handled.
Related guides
CSS colour formats explained: HEX, RGB, HSL, HWB and OKLCH
What each CSS colour format means, when to use it, why OKLCH is useful for palettes, and how to check colour contrast for accessibility.
· 7 min read
JWTs explained: structure, claims, decoding vs verifying, and common mistakes
How JSON Web Tokens work, what each part and claim means, why decoding isn't verifying, and the mistakes that cause real security bugs.
· 8 min read
How to evaluate an AI tool before you pay for it
A seven-point checklist for testing AI tools: accuracy, privacy, ownership of output, real costs and whether you even need a specialised tool.
· 7 min read