Password Generator

Local browser generation. Settings are saved in this browser;. Passwords are not saved.

Main
Character limits
Typeuseminmax
normal character mode
lower
UPPER
digits
symbols

Empty max means no special maximum except total password length. If all minimums add up to the total length, the counts become exact.

Symbols
Action

Generation also runs automatically after every setting change.

2FA / TOTP
------
Secret is not saved and is not sent anywhere. Time is synchronized automatically.
URL fragment variables:
#secret=BASE32SECRET
#totp=encoded_otpauth_uri or #otpauth=encoded_otpauth_uri
Optional: &digits=5..8, &period=10..120.
Use # (fragment), not ? (query string): the fragment is not sent to the server, so the TOTP secret does not appear in the HTTP request or normal server logs.
Spaces in Base32 secrets, including %20 spaces in URL fragments, are removed automatically.
Results

Password weakness calculation