Password Generator

What makes a password strong?

A strong password is long and truly random. Length matters most: every extra character multiplies the number of combinations an attacker has to try. Randomness matters next: passwords built from names, dates, keyboard patterns or common substitutions (like “P@ssw0rd”) are among the first an attacker guesses, however complex they look.

How this generator works

• Passwords are created by your browser’s cryptographically secure random generator (crypto.getRandomValues), the same source used for encryption keys.
• Nothing you generate is sent to our server, stored or logged.
• Every password includes at least one character from each set you tick, and the characters are then shuffled.

Password strength in bits

The strength meter shows entropy in bits: how many yes/no guesses it would take to cover every possible password of that kind. Each extra bit doubles the work. A 16-character password using upper and lower case letters, numbers and symbols has about 100 bits — far beyond what any attacker can try.

The crack time assumes an offline attack at 10 billion guesses per second, a realistic speed for modern graphics cards against a weakly protected password database.

Tips for using passwords safely

• Use a different password for every account, so one leak does not open the others.
• Store them in a password manager rather than in a document or your browser’s notes.
• Turn on two-factor authentication wherever it is offered.
• Use a passphrase for the few passwords you have to type or remember, such as the master password of your password manager.

Frequently asked questions