A strong password generator, right in your menu bar.
Random passwords and easy-to-type passphrases, built with a cryptographic RNG and a strength meter in bits — 100% offline. The password is generated on your machine and never touches a server or the network. One click away every time you sign up somewhere. No account.
Already have Toolbox? Open this widget
Generate a password now
It's generated in your browser with the system's cryptographic RNG. Nothing is sent anywhere and nothing is stored.
100% local · nothing hits the network · nothing is stored
Dial it in, copy, done.
Slide the length from 4 to 64 characters and toggle the character sets — uppercase, lowercase, digits, symbols, and an option to skip ambiguous look-alikes (l/1, O/0). Every draw comes from the system’s cryptographic random number generator with rejection sampling, so each character is equally likely — no modulo bias, no patterns. The strength meter shows the entropy in bits as you tweak, and one click copies the result. The password stays hidden behind dots until you reveal it.
- Length 4–64, with upper/lower/digits/symbols toggles
- “Avoid ambiguous characters” for l/1 and O/0 mix-ups
- Live strength meter — entropy in bits, weak to excellent
- Copy in one click; hidden until you reveal it
Or a passphrase you can actually type.
Some passwords you have to type by hand — a laptop login, the Wi-Fi, a TV. Switch to passphrase mode and get 3 to 10 random words from a curated wordlist, correct-horse style: far easier to read, remember and type than line noise, and still drawn with the same cryptographic RNG. Pick the separator (dash, dot, space or underscore), capitalize the words, and add an optional number at the end.
- 3–10 random words, diceware-style
- Dash, dot, space or underscore separator
- Optional capitalization and trailing number
- Same strength meter, same offline guarantee
A new password shouldn’t start life in a browser tab.
Generating a password on a website means it existed in a page served by someone else’s server — you’re trusting their code, their ads and their logs at the exact moment you create a secret. This widget does the same job locally: the password is generated on your machine, works with the network cable unplugged, and there’s nothing to load, no ads, and no website in the middle. And it’s in your menu bar, not a bookmark.
- Generated locally — never rendered by a remote server
- Works fully offline, no page to load
- No ads, no tracking, no account
Installed from the catalog, in one click.
Password Generator isn’t bundled into the app — it’s a widget in the Webstarted Toolbox catalog. Open the catalog tab (🧰), press the “+” next to Password Generator, and it drops into your menu bar. No reinstall, no app update. Here are a few of its neighbors:
Questions, answered.
Do I have to download anything separately?
No. Password Generator is a widget in the Webstarted Toolbox catalog. Open the catalog tab (🧰) inside the app, hit the “+” next to Password Generator, and it installs in one click — no separate download, and no app update needed.
Is it safe to generate passwords offline?
It’s the safest way to do it. The password is generated on your machine with the operating system’s cryptographic random number generator (crypto.getRandomValues, with rejection sampling so every character is equally likely). It works with no internet connection at all — nothing is sent, fetched or logged anywhere.
Does it store my passwords?
No. It generates a password on the fly and shows it hidden behind dots until you reveal or copy it — the generated value itself is never saved. The only thing it remembers is your settings (length, character sets, word count), so it’s a generator, not a password manager: store the result in the vault you already use.
What makes a generated password strong?
Length and variety. The widget measures both as entropy in bits — up to 64 characters mixing uppercase, lowercase, digits and symbols — and the strength bar tells you where you stand, from weak to excellent. A 16-character password over the full character set is over 100 bits, far beyond what brute force can touch.
What’s a passphrase and when should I use one?
A passphrase strings 3 to 10 random common words together, like “Brave-Lion-Moon-Raft”. It’s much easier to read, type and remember than “vK9#xQ2!” — ideal for passwords you have to type by hand (a laptop login, Wi-Fi) — while random draws from the wordlist keep it strong. You choose the separator, capitalization and an optional number.
Can I avoid look-alike characters like l, 1 and O, 0?
Yes. Turn on “Avoid ambiguous characters” and the generator drops the ones that are easy to misread (l/I/1, O/0, B/8 and friends) — handy when someone has to read the password out loud or type it off a sticky note.
Get Webstarted Toolbox
Free to use. Download the app, then add Password Generator from the catalog in one click. macOS 12+ and Windows 10+.
One icon, many small tools
This is just one of the widgets in Webstarted Toolbox. Here are the rest: