All tools

Tool

Password Generator

Strong random passwords, generated on your device with cryptographic randomness, nothing leaves this page.

Generated password
—
Strength—

—

Options
16

8–64 characters

Character sets

Uses crypto.getRandomValues(), never Math.random().

Session history

Last few passwords from this visit only, cleared on refresh, never saved.

  • No passwords generated yet.

Fully offline after page load, generation makes zero network requests. Passwords are never uploaded, logged, or written to storage.

How to use

How to generate a strong password

Generate a strong, random password entirely in your browser, nothing is sent or stored.

  1. Set the length. Drag the length slider; longer passwords are exponentially harder to crack.
  2. Choose character sets. Toggle uppercase, lowercase, numbers, symbols, and whether to avoid ambiguous characters.
  3. Generate. Click Generate for a new password created with your browser’s secure crypto.getRandomValues().
  4. Copy. Copy the password with one click. Recent results stay in a session-only history until you close the tab.

Strong password generator (crypto.getRandomValues)

Weak passwords still cause most account takeovers. Tokitool generates credentials withcrypto.getRandomValues() (the browser’s cryptographic RNG), notMath.random(). Length, character sets, and ambiguous-character avoidance are under your control; nothing is uploaded or written to long-term storage.

What this tool is for

Use it when a signup form wants a fresh password and you do not want to invent one in your head. Push length first (16+ when the site allows it), then add symbols if the form accepts them. Turn on “avoid ambiguous characters” when you will type the password by hand and 0/O or 1/l would be painful.

What it will not do

  • It is not a password manager. Copy the result into your vault; do not leave it in the tab.
  • It does not check whether a site already saw that string in a breach.
  • It does not sync across devices. Close the tab on a shared computer when you are done.

Prefer longer passwords over short “clever” patterns. For how the strength meter and session-only history behave on this site, read How to generate strong passwords in the browser. Privacy model: private browser tools.

Strong password basics

How randomness works here

Passwords are built with crypto.getRandomValues(), the browser’s cryptographic RNG, not Math.random(). That is the right primitive for credentials.

Length beats clever patterns

Longer passwords with a full character set usually beat short “complex” ones. Use the length slider first, then toggle symbols if a site allows them.

Session history

History stays in memory for this tab only and is cleared when you leave. Nothing is written to localStorage or sent anywhere.

Should I reuse passwords?

No. Generate a unique password per site and store it in a manager. Reuse turns one breach into many.

Are passwords sent to Tokitool?

No. Generation and copy stay in the browser tab. Close the tab when you are done on a shared computer.