Password Generator
Create a strong, random password. Nothing is sent over the network — generation happens on your device.
What makes a password strong?
A strong password is long, random and unpredictable. Length matters more than complexity: a 16-character password using a mix of character types is far harder to crack than a short password with symbols. This generator uses your browser's cryptographically secure random number generator (Web Crypto API) rather than a weaker pseudo-random function, and never transmits generated passwords over the network.
Password best practices
- Use a unique password for every account
- Aim for at least 12–16 characters
- Store passwords in a reputable password manager rather than memorizing or reusing them
- Enable two-factor authentication wherever available
Frequently asked questions
How is password strength actually measured here?
Strength is estimated from length and character variety - combining uppercase, lowercase, numbers and symbols creates a much larger pool of possible characters, which increases the number of guesses an attacker would need.
Are these passwords generated and stored anywhere?
No. Every password is generated locally in your browser using JavaScript's random number generator and is never sent to any server or stored anywhere - closing or refreshing the page discards it completely.
How long should my password be?
Security guidance generally recommends at least 12-16 characters for important accounts. Longer passwords with mixed character types are exponentially harder to crack than short ones, even with special characters added.