Password Generator
The password generator creates strong random passwords from a character set you choose, or memorable multi-word passphrases. Everything is generated with the browser cryptographic random number generator and never leaves your device.
Generated passwords
Set your options and press the generate button.
Results update automatically and are calculated on your device. Nothing you type is sent to a server.
Runs in your browser. Processing happens entirely in your browser. Nothing you enter is sent to Delimiter.live.
How to use the Password Generator
- Choose random characters for maximum strength, or a passphrase if you have to type it by hand.
- Set the length — 16 characters or more for anything that matters.
- Generate, then copy a password straight into your password manager.
- Enable the look-alike exclusion if the password will be read aloud or transcribed.
Example
Input
20 characters, all sets enabled
Output
K7#mQ2vX!pL9wR4dTz%e Estimated entropy: about 128 bits
Common use cases
- Creating a unique password for a new account.
- Generating a database or service credential during setup.
- Producing a passphrase for a device or disk encryption key you must type manually.
- Rotating a credential after an incident.
Limitations and things to watch for
- Randomness comes from crypto.getRandomValues(), the browser cryptographically secure generator. Passwords are created locally and never transmitted, but a compromised device or a malicious browser extension can read anything on the page — generate credentials on a machine you trust.
- Passphrases are built from a fixed list of about 1,200 English words, which is roughly 10 bits of entropy per word. The exact list size and the resulting entropy are shown with every result, so nothing is left to guesswork.
- Length matters far more than exotic symbols. A 20-character password from letters and digits alone is stronger than an 8-character one full of punctuation.
Frequently asked questions
Are the passwords sent to your server?
No. They are generated in your browser with the Web Crypto API and never transmitted, logged or stored. Reloading the page discards them permanently.
How long should a password be?
At least 16 characters for an ordinary account, and longer for anything critical. Length contributes far more to strength than character variety, so a long password from a simple set beats a short one with symbols.
Are passphrases as secure as random passwords?
They can be, if they are long enough. With this word list each word contributes about 10 bits, so four words give roughly 41 bits and six give about 61. That is why the default is six. The exact figure is shown with every passphrase.
Should I reuse a generated password?
Never. The main protection a strong password gives you is that a breach of one service does not compromise the others. Use a password manager so every account gets its own.