Secure Password Generator
Create strong random passwords with a secure random generator.
Use via API
Random passwords from a cryptographic random source. Send JSON, get JSON back.
POST https://pithlab.com/api/v1/tools/password-generator
curl https://pithlab.com/api/v1/tools/password-generator \
-H "Authorization: Bearer $PITHLAB_KEY" \
-H "Content-Type: application/json" \
-d '{"length":20,"count":2}'About the Password Generator
Generate strong, random passwords in your browser using a cryptographically secure generator. Choose length and character types. Nothing is stored or sent.
How to use the Password Generator
- Set the length. 16 or more characters is a good default for most accounts.
- Choose which character types to include. At least one character from each chosen type is guaranteed.
- Tick Exclude ambiguous characters if you'll need to read or type the password by hand.
- Press Generate for a new password, then Copy it into your password manager.
Examples
Input
Length 20, a–z, A–Z, 0–9, symbols
Output
e.g. q7#Vt}mR2x@Lp9;Kd!s (about 128 bits)
Input
Length 8, 0–9
Output
e.g. 40718352 (about 26 bits)
Frequently asked questions
Are these passwords really random?
Yes. They are generated with the Web Crypto API (crypto.getRandomValues), the browser's cryptographically secure random number generator, using rejection sampling so every character is equally likely.
Does PithLab see or store my password?
No. The password is generated on your device and is never sent over the network or saved.
What does the bits figure mean?
It estimates entropy: how many guesses an attacker would need, as a power of two. Each extra bit doubles the work. Around 70 bits is strong for online accounts and 100+ bits is very strong.
How long should my password be?
Use at least 16 characters for important accounts, and a unique password for every site. A password manager makes this practical.