Password Generator

What makes a strong password?

A strong password is long, random, and contains a mix of character types. The key factors are:

• Length — At least 16 characters. Every extra character multiplies the number of possible combinations exponentially.
• Character variety — Combining lowercase, uppercase, digits, and symbols dramatically increases entropy.
• Randomness — Avoid real words, names, or predictable patterns. This generator uses crypto.getRandomValues(), a cryptographically secure random source built into every modern browser.

How is this password generator secure?

All passwords are generated entirely in your browser using the Web Crypto API (crypto.getRandomValues()). No passwords are transmitted to any server, logged, or stored. The page works fully offline once loaded.

Tips for managing passwords

• Use a password manager (e.g. Bitwarden, 1Password) to store generated passwords — you only need to remember one master password.
• Never reuse passwords across different services. A breach on one site won't compromise others.
• Enable two-factor authentication (2FA) wherever available for an extra layer of security.
• Aim for 16+ characters for most accounts, and 20+ characters for critical services like banking or email.

What is password entropy?

Entropy measures how unpredictable a password is, expressed in bits. A password with N characters chosen from a pool of C possible characters has entropy of N × log₂(C) bits. For example, a 16-character password using all character types (lowercase + uppercase + digits + symbols ≈ 90 characters) has roughly 104 bits of entropy — essentially uncrackable by brute force.