Privvert - private browser-based file toolsPrivvert

Password generator

Cryptographically random, generated locally.

About this tool

Generate strong, cryptographically random passwords with adjustable length and character classes. Use it when you need to create a fresh password for an account, generate a temporary password to share over a separate channel, or seed a list of accounts.

Privvert uses the browser's secure random source (window.crypto.getRandomValues) - the same source banks and password managers use - so generated passwords are unpredictable and safe. Nothing is logged or sent anywhere.

Features

  • Length 8-128 characters
  • Toggle uppercase, lowercase, digits, symbols
  • Exclude ambiguous characters (l, I, 1, O, 0)
  • Bulk generate (e.g. 20 at once for batch use)
  • Strength meter (entropy in bits)
  • Browser-only - passwords never logged or sent
  • Free and unlimited

How to use it

  1. Pick length and character classes.
  2. (Optional) exclude ambiguous characters or set bulk count.
  3. Click Generate.
  4. Copy your password and store it in a password manager.
🔒 100% private

Everything happens inside your browser using JavaScript and WebAssembly. Your files are never uploaded to a server, never stored, and never seen by us.

Frequently asked questions

Are these passwords truly random?

Yes - generated with window.crypto.getRandomValues, which uses the operating system's cryptographic random source. The same source used by password managers, browsers and crypto libraries.

What length is safe in 2025?

16+ characters with mixed classes is comfortably safe against offline attacks. Use 24+ for high-value accounts (banking, email, password manager master).

Why exclude ambiguous characters?

Lowercase l and uppercase I, capital O and zero - they look the same in many fonts. Excluding them helps when a password might need to be typed by hand or read aloud.

Should I memorize generated passwords?

No - store them in a password manager (1Password, Bitwarden, KeePassXC). Memorizing one strong master password and letting the manager handle the rest is the modern best practice.