Password Generator
Generate cryptographically random passwords
What makes a password 'strong'?
Strength comes from entropy — the number of guesses required to find your password by brute force. A 12-character password using upper/lowercase/digits/symbols has ~76 bits of entropy, which would take billions of years to brute-force at billions of guesses per second. Length matters more than character variety: a 20-character all-lowercase password is stronger than a 10-character mixed one.
Use a password manager (1Password, Bitwarden, your browser's built-in) to store unique passwords per site. Never reuse passwords — a breach at one site shouldn't compromise your account elsewhere. The most important password is the one to your password manager; make it long, unique, and memorable.
Common use cases
- Sign-up flows — generate a fresh password and save it to your password manager before submitting the form.
- API tokens / database credentials — use a long random string as a service password (32+ chars, no symbols if the system rejects them).
- Wi-Fi passphrase — long, memorable, with symbols. Print and stick on the router.
- Sharing temporary access — generate a one-off password, share, rotate after use.
Frequently asked questions
Is the generator cryptographically secure?
Yes — it uses the browser's `crypto.getRandomValues`, which provides cryptographically strong randomness. Math.random is NOT used (it's predictable and unsuitable for passwords).
How long should a password be?
12 characters minimum for accounts you care about. 16+ for high-value (banking, email). 20+ for password manager master passwords.
Are passwords stored anywhere?
No. The generator runs in your browser and the result is not logged, transmitted, or stored anywhere except temporarily in the page DOM (cleared on reload).
Can I exclude ambiguous characters?
Yes — toggle the option to drop visually similar characters (0/O, 1/l/I) for passwords you'll need to type manually.
Should I memorise generated passwords?
Don't — use a password manager. Memorise only your master password and a small handful of recovery codes.