CEZAMPassword generator
Entropy shown, drawn locally.
Drawn in your browser (crypto.getRandomValues): never stored, never sent.
- 100% local — your data never leaves your browser
- Free, no usage limits
- No sign-up, no account
A local, unbiased draw
The password is drawn in your browser by crypto.getRandomValues, the system’s cryptographic random generator. To keep every character equally likely, bytes beyond the last multiple of the alphabet size are rejected and redrawn (modulo rejection): no character is ever favoured. One character from each ticked family is guaranteed, then the whole string is shuffled.
Nothing leaves the page: no network call, no storage. The password is gone as soon as you close or reload the tab — copy it into your password manager first.
Reading the entropy figure
Entropy measures how many combinations a brute-force attack would have to explore: length × log₂(alphabet size), in bits. The "very strong" threshold is set at 128 bits, beyond exhaustive search on current hardware; "strong" at 90 bits, "fair" at 64. Excluding ambiguous characters shrinks the alphabet from 90 to 81 characters — the figure accounts for it.
This measure assumes a random draw: it says nothing about a password that is reused, already leaked, or built from a dictionary word. A strong password only protects you if it is unique to each service.