What this password generator does
This tool creates strong, random passwords right in your browser. Choose the length and which character types to include — lowercase, uppercase, numbers and symbols — and a new password is generated instantly. A live strength meter shows how hard it would be to guess, and a single click copies it to your clipboard.
Why random passwords matter
The most common way accounts get compromised is reused or guessable passwords. If one service leaks your password and you used it elsewhere, attackers try it everywhere. A long, random, unique password per account removes that risk — and a generator is the only practical way to create one you would never invent yourself.
How the strength meter works
Strength is measured in bits of entropy, an estimate of how many guesses an attacker would need. Each extra character and each extra character type multiplies the possibilities:
| Entropy | Rating | Rough meaning |
|---|---|---|
| under 40 bits | weak | crackable quickly |
| 40–60 bits | fair | okay for low-value logins |
| 60–80 bits | strong | good for most accounts |
| 80+ bits | very strong | suitable for high-value accounts |
The fastest way to raise entropy is length: a longer password beats a short one with more symbol types almost every time.
Secure by design
Passwords are generated with your browser's cryptographic random number generator
(crypto.getRandomValues) using rejection sampling, so there is no statistical bias
toward certain characters. Nothing is sent to a server, nothing is logged, and generated
passwords are never stored — only your preferences (length and character sets) are
remembered locally.
Tips for everyday use
- Use a unique password for every account — never recycle one.
- Store them in a password manager so you do not have to remember them.
- Turn on two-factor authentication wherever it is offered.
- Exclude ambiguous characters (l, I, 1, O, 0) if you will read or type the password by hand.
- For passphrases you must memorize, prefer length over complexity.