Security
Password Generator
Create secure passwords with configurable length and character sets. Passwords are generated locally and are not stored.
Runs locally in your browser. Your input is not uploaded. Generated passwords are not stored.
How this tool works
Strong passwords should be long, random, and unique for each account.
This generator avoids Math.random and uses browser cryptographic randomness.
Examples
- Generate a 20-character password with symbols for a new account.
- Avoid ambiguous characters when reading a password aloud or typing it manually.
- Generate a 32-character value without ambiguous characters and store it directly in a trusted password manager.
Common use cases
What makes a generated password strong
A strong generated password is long, random, and unique. Length provides a large search space, and cryptographic randomness prevents predictable patterns.
DevPouch uses browser cryptography for generation rather than Math.random. Generated passwords are not stored by the app, so save important passwords in a trusted password manager.
When to adjust options
- Increase length when a service allows long passwords.
- Disable ambiguous characters when a password must be read aloud or typed manually.
- Keep symbols enabled unless the receiving system has restrictive password rules.
- Never reuse a generated password across accounts.
Invalid or unsafe assumption
Invalid/failure example
Disabling every character class leaves no alphabet from which a password can be generated.
Mistakes to avoid
- Using Math.random.
- Saving a generated password in URL or browser storage.
- Reducing length to satisfy an outdated composition rule without reviewing risk.
Limits of this workflow
The entropy display is an estimate based on the configured alphabet and length.
A secure generator cannot protect a password after unsafe copying or storage.
Local-processing and privacy boundary
Passwords use crypto.getRandomValues, are not logged or stored, and disappear on reload; clipboard and screen exposure still matter.
Practical workflow
- Select length and required character classes.
- Exclude ambiguous characters only when usability requires it.
- Generate and copy once.
- Store the value in a trusted password manager and clear the clipboard.
Related guides
Official references
FAQ
How are passwords generated?
The tool uses crypto.getRandomValues to choose characters from the selected character sets.
Are generated passwords saved?
No. Passwords are not stored by this app. Copy them into your password manager if you need to keep them.
Does DevPouch remember generated passwords?
No. Generated values are intentionally absent from URL state and browser storage and are replaced after reload.