Handiwork
  • Home
  • Tools
  • Guides
  • Categories
  • About
Browse Tools
Handiwork
  • Home
  • Tools
  • Guides
  • Categories
  • About
Browse Tools

Popular tools

  • GPA & CGPA Calculator
  • Bill Splitter
  • Age Calculator
  • QR Code Generator
  • Keyboard Tester
  • Passphrase Generator

Categories

  • Text
  • Image
  • Design & Color
  • PDF & Documents
  • Developer
  • Security
  • Calculators
  • Converters & Encoders
  • Productivity
  • Random & Decision

Resources

  • All Tools
  • Guides
  • Editorial Standards
  • Changelog
  • About
  • Contact

Legal

  • Privacy Policy
  • Terms of Use
Browse all tools>
English

© 2026 Handiwork. Built and maintained by Handiwork.

All toolsAll security tools

Security tool

Password Generator

Create strong random passwords with presets, strength meter, and entropy readout.

Generated locally in your browser — passwords are never sent to a server.

Generated password

Strength—
Length
—
Charset
88
Entropy
—

Options

Presets

Character types

About the Handiwork Password Generator

The Password Generator creates random passwords tailored to your rules. Start from a preset — General, Extra long, Wi‑Fi, or No symbols — or fine-tune length, character types, and ambiguous-character exclusion. A live generated search-space estimate and length/charset stats make the trade-offs visible. Passwords regenerate when options change, and generation runs locally in your browser.

How to use the Handiwork Password Generator

  1. Pick a preset (General, Extra long, Wi‑Fi, or No symbols) or set length with the slider or quick-pick chips.
  2. Toggle uppercase, lowercase, numbers, and symbols — optionally exclude ambiguous characters like 0, O, 1, l, and I.
  3. Review the strength meter and entropy, then copy your password. It updates automatically when options change.

What makes a password strong?

Strength comes mostly from length, unpredictability, and uniqueness. For a password selected uniformly by this generator, the displayed bits describe the size of the possible search space. That math does not apply to a human-edited password or prove that an account is safe from phishing, malware, password reuse, or a service breach.

Presets for common scenarios

The General preset uses 16 characters with all character types. Extra long uses 20. Wi‑Fi uses 12 characters without symbols and excludes ambiguous characters for easier manual entry; increase its length when the device allows it. No symbols fits sites that reject special characters. Presets are starting points, not endorsements for a particular service.

Exclude ambiguous characters

Characters like 0 and O, or 1 and l, look alike in many fonts and are easy to mistype — especially on phone keyboards or printed recovery sheets. Enable “Exclude ambiguous characters” to drop 0, O, 1, l, I, and | from the pool. The generator still guarantees at least one character from each type you leave enabled.

Use a unique password everywhere

Reusing passwords means one breach can compromise many accounts. Generate a unique password per site and store them in a password manager so you only have to remember one master password. Your generator options are saved locally for convenience, but generated passwords are never stored.

Continue this workflow

Use the adjacent tool when the next step calls for a different input, output, or method.

  • Passphrase GeneratorGenerate several independent random words when memorability and easier manual entry matter more than compact length.

Assumptions and limitations

  • The bits shown describe passwords generated uniformly from the selected character pools. They do not measure a password after you edit it into a pattern or reuse it elsewhere.
  • A service may impose different length and character rules. Prefer a longer password when accepted and keep every account credential unique.
  • Store generated passwords in a reputable password manager and enable multi-factor authentication where available.

Sources and standards

These authoritative references were used to verify the method and guidance on this page.

  • NIST SP 800-63B-4 — Passwords — U.S. National Institute of Standards and Technology
  • Web Cryptography Level 2 — World Wide Web Consortium (W3C)

Frequently asked questions

Are the generated passwords safe to use?

+

Passwords are created with the Web Crypto API and unbiased sampling, locally in your browser. Handiwork does not transmit or intentionally store generated values; only your option preferences are saved. Store the result in a password manager rather than leaving it in an open tab.

How long should my password be?

+

Longer is generally stronger when the value is random and unique. NIST’s current guidance requires verifiers to support at least 15 characters for a password used as a single authentication factor and at least 64 characters as a maximum. Follow the destination service’s requirements and use the longest practical generated value.

What does the entropy number mean?

+

For this generator, the displayed bits are log₂ of the number of possible outputs from the selected length and character pools. Each additional bit doubles that generated search space. It is not a prediction of account compromise time.

Why exclude ambiguous characters?

+

Some characters are hard to tell apart (0 vs O, 1 vs l) or type on certain keyboards. Excluding them makes passwords easier to read aloud or enter manually — useful for Wi‑Fi networks, shared credentials, or recovery codes — with only a small reduction in entropy.

Does the password change when I adjust settings?

+

Yes. The password regenerates automatically whenever you change length, character types, or other options. Use the refresh button if you want a different password with the same settings.

Method and guidance reviewed July 12, 2026 by Handiwork.

How we review tools

Go deeper

Understand the method and trade-offs

Security · 11 minPasswords, passphrases, and browser encryptionPassword tools solve different problems. This guide explains the difference between generation and estimation, why length and uniqueness matter, and why encryption is only as strong as its password and operating environment.Read guide

Related security tools

All security tools
  • Paste & Clear PII ScrubberPaste text to auto-redact emails, API keys, JWTs, webhooks, and other sensitive data.
  • Password Strength CheckerTest password strength with entropy, crack-time estimates, and improvement tips.
  • Text Encrypt & DecryptEncrypt and decrypt text with a password using AES-256, locally in your browser.