Random string & password generator

About this tool

Uses crypto.getRandomValues exclusively — the same CSPRNG modern browsers expose for security-sensitive work. Never Math.random(). Generated values are not written to the URL or any server.

Entropy is theoretical (uniform random). Real-world strength also depends on how you store the secret and whether an attacker can guess offline. Crack time assumes 10¹⁰ offline guesses per second — a rough ceiling for leaked hash lists, not for a rate-limited login form.

Passphrase mode draws from 517 common English words; hex and base64 modes emit raw random bytes for API keys and tokens. Generate up to 50 values per batch, but paste each secret straight into a password manager and avoid leaving it on screen or in clipboard history.