About strong passwords
The passwords people invent follow patterns — a name, a year, an exclamation mark — and password-cracking software tries those patterns billions of times per second. Truly random passwords defeat that approach, and this generator produces them using your browser's cryptographic random number generator (the same source used for encryption keys), not the predictable "random" used in casual code. Generation happens entirely on your device; no password is ever transmitted, stored or logged.
How to generate a password
- Set the length — 16 characters is a strong default; go longer for important accounts.
- Choose character sets. Keeping all four enabled maximizes strength; avoid look-alikes drops 0/O and 1/l/I for passwords you might type by hand.
- Press Generate until you get one you like, then Copy.
- Need many at once — for a team or a batch of accounts? Generate 10 at once.
Password sense, briefly
- The entropy meter shows bits of randomness: 65+ bits is strong for online accounts, 90+ is effectively uncrackable offline.
- Never reuse a password across sites — one breach then unlocks everything. A password manager makes unique passwords practical.
- Length beats complexity: a 20-character password from letters alone is stronger than 10 characters of everything.
- Turn on two-factor authentication wherever it's offered; it protects you even if a password leaks.
Frequently asked questions
Is it safe to generate passwords on a website?
Here, yes — passwords are generated by your browser's cryptographic random number generator, entirely on your device. Nothing is transmitted or stored; you can even load the page, go offline, and generate.
How long should my password be?
16 characters with mixed character sets is strong for any online account. For master passwords and encryption, go 20+. The entropy meter turns 'strong' at about 65 bits and 'very strong' at 90.
What does 'avoid look-alikes' do?
It removes characters that are easily confused when read or typed by hand: 0/O, 1/l/I and similar. Use it for passwords that might be written down or dictated.