ToolPetal
Password generator
Client-side only. Random bytes from crypto.getRandomValues. Nothing is uploaded or saved.
…
Worked entropy examples
Approximate bits of entropy for a uniform random string are length × log₂(charset size). That models brute force against a full charset, not guessability of a human-chosen phrase.
| Length | Charset | Size | ≈ bits |
|---|---|---|---|
| 12 | Lowercase only | 26 | ≈ 56 |
| 16 | Lower + upper + digits | 62 | ≈ 95 |
| 16 | Lower + upper + digits + symbols (this page) | 88 | ≈ 103 |
| 24 | Lower + upper + digits | 62 | ≈ 143 |
Turning on Exclude ambiguous shrinks the alphabet (for example 62 → about 52 for alphanumerics), so bits per character fall a little. Length still matters more than one extra symbol class.
What this generator does not do
- Not a password manager. No vault, sync, autofill, or history.
- No Have I Been Pwned or other breach lookup.
- No zxcvbn or online scoring API. The strength line is a local entropy estimate only.
- Does not guarantee a site will accept every character. Some forms ban certain symbols or cap length.
Charset and ambiguity notes
Defaults include A-Z, a-z, 0-9, and this symbol set: !@#$%^&*()-_=+[]{}|;:,.<>? (26 symbols). Together that is 88 characters before ambiguity filtering.
Exclude ambiguous removes 0, O, o, 1, l, I, and | so you are less likely to misread a password you wrote down or typed from a screen. Use it when humans will retype the string; leave it off when a password manager will paste it.
When a random string is the wrong tool
Prefer a long passphrase (or your manager's diceware-style option) when you must memorize something. Prefer SSO or a hardware key when the account supports it. For OAuth clients that need a code verifier, use the PKCE generator instead of treating an opaque password as a protocol secret. For opaque public IDs in URLs, prefer NanoID or UUID v7.
FAQ
Are generated passwords uploaded?
No. Characters are drawn with crypto.getRandomValues in this tab. ToolPetal has no backend that receives or stores passwords.
How is strength estimated?
The hint uses approximate entropy: length times log2 of the active charset size, assuming independent uniform picks. It is not a dictionary or breach check. Short phrases and reused passwords can still be weak even when the bit estimate looks high.
What does Exclude ambiguous remove?
When enabled, the generator drops lookalikes from the charset: 0, O, o, 1, l, I, and the pipe character. That shrinks the alphabet, so entropy per character drops slightly.
Is this a password manager?
No. It only mints random strings. It does not save, sync, autofill, or check breaches. Copy the result into your own manager or vault.