Password Generator
Generate strong, secure passwords instantly. Custom length, character sets, entropy strength meter, bulk generation, and passphrase mode. Everything runs in your browser — nothing is ever sent anywhere.
🔒 Cryptographically secure
Uses the Web Crypto API's getRandomValues() — the same source of randomness used by security software.
📊 Entropy meter
Shows password strength in bits of entropy — the actual mathematical measure of how hard a password is to crack.
📖 Passphrase mode
Generate memorable word-based passphrases like "correct-horse-battery-staple" — easier to remember and often more secure than random characters.
📦 Bulk generation
Generate up to 50 passwords at once. Perfect for seeding test databases, creating temporary credentials, or provisioning users.
🚫 Exclude ambiguous
Optionally exclude visually similar characters like 0/O and l/1 that cause confusion when reading passwords aloud or typing them manually.
🔒 100% private
All passwords are generated locally in your browser. Nothing is sent to any server. DevCrate never sees your passwords.
How to use the Password Generator
How long should a password be?
For most accounts, 16-20 random characters is excellent. For highly sensitive accounts like email or banking, 24+ characters adds meaningful protection. Length matters more than complexity — a 20-character lowercase password is harder to crack than a 10-character password with symbols.
What is entropy and why does it matter?
Entropy is measured in bits and represents how many guesses an attacker would need to crack your password. Every additional bit doubles the number of guesses required. 40 bits is weak, 60 bits is reasonable for most accounts, 80+ bits is strong, and 128 bits is essentially uncrackable with current technology.
Passwords vs passphrases
Random character passwords are hard to memorize but excellent for password managers. Passphrases — multiple random words strung together — are easier to remember and type while offering similar or better security at 4-5 words. Use passphrases for accounts you type regularly (like your computer login) and random passwords stored in your password manager for everything else.