๐Ÿ”

Password Generator

Generate strong, cryptographically random passwords. All generation happens in your browser โ€” passwords are never transmitted anywhere.

4128

Generated Passwords

About the Password Generator

The Oneyfy Password Generator creates cryptographically strong random passwords using your browser's crypto.getRandomValues() API. Passwords are generated entirely on your device and are never stored, logged, or transmitted.

How to Use

  1. Drag the length slider to set the desired password length (4โ€“128 characters).
  2. Check or uncheck character sets: uppercase, lowercase, numbers, symbols.
  3. Optionally exclude ambiguous characters (0, O, l, 1, I) for readability.
  4. Choose how many passwords to generate.
  5. Click Generate New or use the copy button on any password.

How It Works

Random bytes are generated using window.crypto.getRandomValues(), which provides cryptographically secure pseudorandom numbers. Characters are selected uniformly from the enabled character set using modular arithmetic with bias rejection to ensure each character is equally likely.

Password Strength Guidelines

Weak: < 8 characters. Fair: 8โ€“11 characters with mixed types. Strong: 12โ€“15 characters. Very Strong: 16+ characters with all character types. For maximum security, use 20+ characters with all options enabled.

Frequently Asked Questions

Yes. This generator uses crypto.getRandomValues(), which is cryptographically secure. The entropy is sufficient for strong password security when using a long password with multiple character types.
No. Password generation happens entirely in JavaScript within your browser. Nothing is stored in localStorage, cookies, or sent to any server. Once you close the page, the passwords are gone.
Security experts recommend at least 16 characters for important accounts. For critical accounts (banking, email, password manager master password), use 20+ characters.
Entropy measures how unpredictable a password is. Higher entropy means more possible combinations, making brute-force attacks harder. A 16-character password using all character types has about 105 bits of entropy โ€” practically uncrackable.