How the Password Generator works.
characters = unbiased cryptographic random indexes into the selected alphabetsLength is 8–128 characters; enabled character classes define the candidate alphabet, each selected class is represented, and the readability setting controls whether I, l, O, 0, and 1 are available.
Worked example for the Password Generator.
A 20-character password using lowercase, uppercase, digits, and symbols is generated from the selected pools and includes at least one character from every enabled class.
How to read this result.
The generator creates a new random password locally from the selected character classes using the browser cryptographic random-number generator. You can exclude commonly confused characters such as I, l, O, 0, and 1 for easier manual reading.
How this tool gets the answer
characters = unbiased cryptographic random indexes into the selected alphabets. Length is 8–128 characters; enabled character classes define the candidate alphabet, each selected class is represented, and the readability setting controls whether I, l, O, 0, and 1 are available. The generator creates a new random password locally from the selected character classes using the browser cryptographic random-number generator. You can exclude commonly confused characters such as I, l, O, 0, and 1 for easier manual reading.
A useful example
A 20-character password using lowercase, uppercase, digits, and symbols is generated from the selected pools and includes at least one character from every enabled class. A quick way to verify the calculation is: Each selected class contributes at least one character; remaining positions use the combined alphabet, unbiased rejection sampling selects indexes, and a cryptographically secure shuffle removes fixed class placement.
What the result tells you
The generator creates a new random password locally from the selected character classes using the browser cryptographic random-number generator. You can exclude commonly confused characters such as I, l, O, 0, and 1 for easier manual reading. Length is counted in characters. The displayed maximum entropy estimate uses the actual candidate alphabet after the readability setting is applied.
Where the answer can go wrong
Length must be 8–128 characters, at least one class must be enabled, and length cannot be smaller than the number of selected classes. Excluding ambiguous characters slightly reduces the candidate alphabet. A generated password is only one part of account security; use a password manager, unique credentials, multifactor authentication, and the service’s recovery controls. A theoretical entropy estimate is not a guarantee that a specific website will accept the password or that an account cannot be compromised in other ways.
Privacy and practical use
Passwords are generated with crypto.getRandomValues in this browser. They are never transmitted, logged, or stored by FigureNest. Keep the source value and its unit with any result you save so you can reproduce the calculation later.
Inputs and edge cases to check.
Length must be 8–128 characters, at least one class must be enabled, and length cannot be smaller than the number of selected classes. Excluding ambiguous characters slightly reduces the candidate alphabet.
What this tool does not include.
A generated password is only one part of account security; use a password manager, unique credentials, multifactor authentication, and the service’s recovery controls. A theoretical entropy estimate is not a guarantee that a specific website will accept the password or that an account cannot be compromised in other ways.
Reference guidance and methodology.
Password Generator questions.
What does the Password Generator do?
Generate strong random passwords locally with browser cryptographic randomness and character controls.
How can I check the result?
Each selected class contributes at least one character; remaining positions use the combined alphabet, unbiased rejection sampling selects indexes, and a cryptographically secure shuffle removes fixed class placement.
Which units and assumptions matter?
Length is counted in characters. The displayed maximum entropy estimate uses the actual candidate alphabet after the readability setting is applied. A generated password is only one part of account security; use a password manager, unique credentials, multifactor authentication, and the service’s recovery controls. A theoretical entropy estimate is not a guarantee that a specific website will accept the password or that an account cannot be compromised in other ways.
Are the entered values sent or stored?
Passwords are generated with crypto.getRandomValues in this browser. They are never transmitted, logged, or stored by FigureNest.