How to use the password generator
A new password appears as soon as the page loads. Adjust the length and character types, then press Copy. Click Generate new any time for a fresh one. Every password is created on your device, so even we never see it.
What makes a password strong?
- Length: each extra character multiplies the number of possible passwords. A 16-character random password is billions of times harder to crack than an 8-character one.
- Randomness: people are bad at being random. Names, dates and keyboard patterns like "qwerty" are guessed first.
- Uniqueness: never reuse a password. If one site leaks, attackers try the same password everywhere else.
How strength is measured
The strength meter estimates entropy: length × log₂(size of the character set). For example, a 16-character password using all 94 printable characters has about 16 × 6.55 ≈ 105 bits. That is far beyond what can be brute-forced.
Password safety checklist
- Use a password manager to store unique passwords.
- Turn on two-factor authentication (2FA) for email, banking and social accounts.
- Change any password that appears in a data breach.
Frequently asked questions
Is this password generator safe?
Yes. Passwords are generated on your own device using your browser's cryptographically secure random number generator (crypto.getRandomValues). They are never sent to a server or stored.
How long should my password be?
Use at least 12 characters, and 16 or more for important accounts like email and banking. Length adds more strength than complexity.
What does "bits of entropy" mean?
Entropy measures how hard a password is to guess. Each extra bit doubles the number of guesses needed. Around 60 bits is reasonable, 80+ is strong and 100+ is very strong.
How do I remember all these passwords?
Use a password manager. It stores a unique strong password for every site, so you only need to remember one master password.