Random passwords and secrets from your browser crypto source.
Runs entirely in your browser. Nothing you paste here is sent to us or to anyone else.
This uses crypto.getRandomValues, the cryptographic random source built into the browser, not Math.random. It also rejects values that would skew the distribution when the character set does not divide evenly into the random range, so every character is equally likely.
Entropy measures how many guesses an attacker needs on average, assuming they know exactly how the password was generated. Below 60 bits is weak for anything reachable from the internet; 80 bits and above is comfortable for an API secret.