16
🚫 No storage
📴 Works offline
Why use a password generator?
The passwords people invent follow patterns — a name, a birth year, a “!” on the end. Attackers know those patterns, and modern cracking tools test billions of guesses per second.
A generated password has no pattern. Every character is picked at random, so the only way in is to try every possibility — which, for a long password, takes effectively forever.
Aim for 16+ characters, mix all four character types, and use a unique password for every account. A password manager makes that effortless.
How strong is “strong”?
Strength is measured in bits of entropy — how many guesses an attacker would need. Under ~40 bits is weak; 60–90 is strong; 90+ is very strong. This tool shows the estimate live as you change the options.
Frequently Asked Questions
Is this password generator safe to use?
Yes. Everything runs inside your browser using the Web Crypto secure random engine. No password is ever sent over the internet, logged, or stored — close the tab and it’s gone.
How long should my password be?
At least 16 characters for important accounts. Length matters more than complexity — a long password with mixed character types is far harder to crack than a short, clever one.
What does “exclude look-alikes” do?
It removes easily confused characters — lowercase l, the number 1, capital O and zero — so the password is easier to read and type by hand without weakening it much.
Should I use a different password for every website?
Absolutely. If one site is breached and you reused that password, every other account is exposed. Generate a unique one per site and keep them in a password manager.
