How to generate a strong password
- Pick a random password or a memorable passphrase.
- Set the length or the number of words.
- Choose the character sets you need.
- Press Generate and check the entropy score.
- Copy the password straight into your password manager.
What this password generator gives you
- Secure randomness from the browser and never Math.random.
- Rejection sampling so every character has an equal chance.
- Passphrases from a word list that are easy to type and recall.
- An honest entropy score in bits.
- Lookalike characters left out by default.
- No storage, no upload and no logs.
Length beats complexity
Many sites demand one capital letter, one number and one symbol. Those rules came from a time when people picked their own passwords. They mostly lead to predictable results. People capitalize the first letter. They add a number at the end. They finish with an exclamation mark.
Entropy decides real strength. Experts measure it in bits. Length adds far more entropy than variety does.
| Password style | Entropy |
|---|---|
| 10 characters using every type | About 65 bits |
| 20 lowercase letters | About 94 bits |
| 5 random words | About 55 bits |
| 6 random words | About 66 bits |
The longer and simpler password is roughly a billion times harder to guess.
How to read the entropy score
- Under 40 bits: weak. Common hardware cracks it fast.
- 40 to 60 bits: fair for low value accounts.
- 60 to 80 bits: strong and fine for most accounts.
- Above 80 bits: very strong. Use this level for a password manager's main password.
Each extra bit doubles the work for an attacker. So a jump from 60 to 80 bits is not a 33 percent gain. It is about a million times harder to crack.
When the password generator should make a passphrase
Five random words give about 55 bits of entropy. You can type them on a phone without frustration. Six words push it past 65.
The key word is random. Words you pick yourself come from a much smaller pool. The entropy then collapses. Use passphrases for anything you type by hand often. Good examples include a laptop login, a disk encryption key or your password manager's main password. For the hundreds of site logins your manager fills in, random characters work better. You never type them anyway.
Where the randomness comes from
This password generator uses the browser crypto API. It draws on the random pool of your operating system. It also uses rejection sampling instead of a simple remainder. A plain remainder makes some characters slightly more likely than others. That bias weakens output at scale.
Tools built on Math.random are not safe for secrets. Its output becomes predictable with enough samples. Nobody designed it for passwords.
What to do with your new password
Put it straight into a password manager. That one habit protects most people more than anything else. Use a unique password for every site. Turn on two factor authentication where you can. The US Cybersecurity and Infrastructure Security Agency gives the same advice.
Why the tool skips lookalike characters
Letters like l and I look like the number 1. The letter O looks like zero. People confuse them when they read a password aloud or type it from a screen. The tool leaves them out by default. Turn them on if you only ever paste.
Signs an old password needs a change
Change a password right away if a site reports a breach. Change it if you used it on more than one site. Change it if you shared it by text or email.
Free breach alert services can tell you when your email shows up in a leak. A new random password from this tool takes seconds. Your password manager then remembers it for you. You never need to recall it yourself.
Who uses a password generator?
Everyday users secure email and bank logins. IT teams set up new accounts. Developers create API secrets. Families set up a strong Wi-Fi password.
Your passwords stay private
Your browser creates every password. No server sees it and no log records it. Close the tab and it is gone. So copy it into your manager first. Need unique IDs instead? Use the UUID generator. Want to lock a document? Try protect PDF. Want to share Wi-Fi with guests? The QR code generator helps.