Why use a password generator?
Humans are terrible at randomness. We reuse passwords, pick dictionary words, and add a predictable "!" at the end. Attackers know this — credential-stuffing bots try leaked passwords across thousands of sites per minute. A 16-character random password has about 95 bits of entropy; guessing it would take longer than the age of the universe with current hardware. The generator below uses your browser's cryptographic random number source (crypto.getRandomValues), the same primitive behind TLS keys.
How to create a strong password
1. Set the length (16+ recommended; 20+ for critical accounts).
2. Keep all character types enabled for maximum entropy.
3. Press Generate Password, then click any password to copy it.
4. Store it in a password manager — never reuse it across sites.
Password tips
Length beats complexity: a 20-character lowercase-only password is stronger than an 8-character mix of everything. Enable two-factor authentication wherever offered — even the strongest password can leak. And never generate passwords on a site you don't trust; this page runs entirely offline-capable JavaScript, so you can even disconnect from the network after loading it.
Frequently asked questions
Are generated passwords stored anywhere?
No. Generation uses crypto.getRandomValues() in your browser. Nothing is sent to any server, logged, or stored — closing the tab erases everything.
How long should my password be?
16 characters minimum for most accounts, 20+ for email, banking and password managers. Every extra character multiplies guessing time exponentially.
What does the strength meter measure?
Entropy in bits, estimated from the character pool size and length. 80+ bits is strong, 100+ is excellent. It does not account for dictionary attacks — but random passwords have no dictionary pattern.
Should I use symbols?
They add entropy, but length matters more. Some older sites reject symbols; in that case just make the password longer.
Is this safe to use on a public computer?
The generation itself is safe, but avoid copying passwords on untrusted machines (keyloggers). Generate on your own device.