How it works
The generator builds a character pool from the options you enable, then draws each character using the Web Crypto API, the same cryptographically secure random source browsers use for encryption. Strength is estimated from entropy: the number of bits of randomness in the password.
entropy (bits) = length × log₂(pool size)
< 40 bits weak · 40–60 fair · 60–80 strong · 80+ very strong
< 40 bits weak · 40–60 fair · 60–80 strong · 80+ very strong
- Use 12–16+ characters with several character types for everyday accounts.
- Never reuse passwords, a manager lets you use a unique one everywhere.
- Nothing here is transmitted; the password exists only in your browser.