How it works
The generator builds a character pool from the options you enable, then draws each character using the Web Crypto API — the same cryptographically secure random source browsers use for encryption. Strength is estimated from entropy: the number of bits of randomness in the password.
entropy (bits) = length × log₂(pool size)
< 40 bits weak · 40–60 fair · 60–80 strong · 80+ very strong
< 40 bits weak · 40–60 fair · 60–80 strong · 80+ very strong
- Use 12–16+ characters with several character types for everyday accounts.
- Never reuse passwords — a manager lets you use a unique one everywhere.
- Nothing here is transmitted; the password exists only in your browser.