About Vault
Vault creates strong, random passwords right in your browser. You choose the length and which character types to include, and it builds a password using cryptographically secure randomness — no predictable patterns, no dictionary words, no reused generator seeds.
Features
- Adjustable length from 4 to 64 characters
- Toggle uppercase, lowercase, numbers and symbols independently
- Optional filter to exclude confusing look-alike characters
- Built-in strength meter based on length and character variety
- One-tap copy to clipboard
- Uses your browser's cryptographic random number generator — nothing is sent to a server
How to use it
- Drag the length slider to set how many characters you want.
- Tick the character types to include — leave all four on for the strongest results.
- Optionally tick "Exclude look-alikes" if you'll be typing the password by hand.
- Tap "Generate password" to create one.
- Tap "Copy" to copy it straight to your clipboard.
Frequently asked questions
Are these passwords actually random?
Yes. Vault uses your browser's built-in cryptographically secure random number generator (crypto.getRandomValues), the same kind of randomness used for security-sensitive operations, rather than a simple predictable random function.
Does Vault store or send my generated passwords anywhere?
No. Password generation happens entirely on your device. Nothing is logged, saved, or transmitted — once you leave the page, the password only exists wherever you pasted it.
What does the strength meter measure?
It estimates strength from the length you chose and how many character types are mixed in. Longer passwords with a mix of uppercase, lowercase, numbers and symbols score higher.
Why exclude look-alike characters?
Characters like lowercase l, uppercase I, uppercase O and the digits 1 and 0 can be hard to tell apart in some fonts. Excluding them helps if you need to read the password aloud or type it from a printed copy.
What's the maximum length I can generate?
Vault supports passwords from 4 up to 64 characters, which comfortably covers virtually every website's password requirements.