How to generate a strong password
- Set the length (16+ recommended) and pick which character sets to include.
- Click ↻ Regenerate until you're happy — every click is a fresh cryptographically random password.
- Copy it into your password manager. Tick Exclude look-alikes if you'll ever have to type it by hand.
Why is client-side generation safer? Most "password generator" sites create the password on their server, which means your new password crosses the internet before you've even used it. This one runs entirely in your browser using crypto.getRandomValues — the same cryptographic randomness password managers use. Every selected character set is guaranteed to appear at least once, and the result exists only on your screen and clipboard.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are generated on your device using the browser's cryptographic random number generator and are never transmitted, logged or stored. You can even go offline after the page loads.
How long should a password be?
16 characters with mixed sets is a strong default (~100 bits of entropy). Use 20+ for critical accounts like email or banking, and store passwords in a manager rather than reusing them.
What does the entropy number mean?
Entropy measures how many guesses an attacker needs — each extra bit doubles the work. 60+ bits resists online attacks; 80+ bits is considered strong against offline cracking.