Security & certificates

Password generator

Strong passwords for root, databases and panels. Generated by your browser's cryptographic RNG — the page never sends them anywhere.

Runs entirely in your browser — nothing you enter is sent to our servers.

How it works

Each character is drawn with crypto.getRandomValues using rejection sampling, so every symbol in the set is equally likely. At least one character from every selected set is guaranteed. The entropy figure is length × log2(set size): around 80 bits is plenty for a server password, 128 bits is overkill in a good way. Look-alike characters (l, 1, I, O, 0) are excluded by default, which helps when you have to type the password from a phone screen.

FAQ

Is it safe to generate a password on a website?

Only if the generation happens locally. Here it does: the code runs in your tab, and you can confirm in DevTools → Network that no request goes out when you press Generate.

How long should a server password be?

16–20 random characters from all four sets gives 100+ bits of entropy. For SSH, switch to keys and disable password login altogether.