Password Generator

Cryptographically random, generated in your browser.

What makes a password strong

Strength is entropy: length and character variety multiplied. A 16-character random password over 70+ possible characters carries ~98 bits of entropy — more than all the GPUs on Earth could brute-force in centuries. Passwords shorter than 12 characters are realistically crackable; length beats cleverness every time, so when a site restricts symbols, go longer.

This generator uses crypto.getRandomValues() — the browser's cryptographically secure random source, not Math.random, which is predictable and unsuitable for anything security-related. Everything happens locally; the password never touches a network.

Passphrase mode trades symbols for memorability: four random words give roughly the same entropy as a 14-character random password and are vastly easier to type on a phone. Pair any password with a password manager and two-factor auth — the manager remembers, you only guard one master passphrase.

FAQ

Is it safe to generate passwords online?

Here, yes: generation is local JavaScript with no network calls — you can disconnect from the internet and it still works. Never enter a password into a site that posts it to a server.

Should every account get a unique password?

Yes. Reuse means one breach leaks everywhere. A password manager makes uniqueness free.