Secure Password Generator
Spin the dial · take the key · nothing leaves the vault
Your key · engraved
-
Strong, random, made on your machine
Every spin draws from your browser's cryptographic random generator (crypto.getRandomValues), never a server. Choose the character sets, set the length, spin. The bolts show the strength estimate: four bolts thrown is well beyond what any online attack can brute-force.
Nothing you generate is stored or sent anywhere. Copy it straight into your password manager.
How is strength measured?
Bits of entropy: log2 of the character-set size times the length. 60 bits throws two bolts, 80 three, 100 all four.
Why exclude symbols by default?
Some sites reject them. Turn the tumbler on when the site allows them; it adds roughly six bits per character.
Are look-alike characters avoided?
Yes: 0, O, 1, l and I are left out of every set so a key you read off the plate types back correctly.
Vault 07All tools