What makes a password strong
Length beats complexity. Each extra character multiplies the number of guesses an attacker needs, so a 20-character password is vastly harder to crack than a 10-character one with the same symbols. The strength meter shows entropy in bits: roughly, every additional bit doubles the guessing effort. Aim for 80 bits or more for important accounts.
Is it safe to generate passwords online?
This generator runs entirely on your device using the browser's built-in cryptographic random generator (crypto.getRandomValues). The password never leaves your screen, and it isn't logged or saved.
Good habits
- Use a different password for every account, and keep them in a password manager.
- Turn on two-factor authentication wherever it's offered.
- Turn on "avoid look-alikes" if you'll ever need to type the password by hand.
Frequently asked questions
How long should my password be?
At least 16 characters for important accounts. With a password manager there's no downside to 20 or more.
Do you store the passwords?
No. Only your settings (length and character types) are remembered in your own browser.
Why include symbols?
They enlarge the character set, which raises entropy per character. Some sites reject certain symbols — just untick them if needed.