Password Generator

Two things make a password hard to crack: length and unpredictability. Length matters most — each extra character multiplies the number of possible combinations an attacker must try. A random 16-character password drawn from upper- and lower-case letters, digits and symbols has so many combinations that brute-forcing it is infeasible with today's hardware, while a short 'clever' password built from a dictionary word and a number falls in seconds to modern cracking tools.

Unpredictability is the other half. Passwords based on names, dates, keyboard patterns or common substitutions (like 'P@ssw0rd') are weak because cracking software knows those tricks. True randomness — characters chosen with no pattern a human would pick — is what this generator provides.

Every password is built using your browser's cryptographically secure random number generator (the Web Crypto API), the same class of randomness used for encryption keys — not the predictable 'Math.random' that many simple generators rely on. The password is created entirely on your device and never sent anywhere, so it isn't logged on a server or transmitted across the network.

You control the length and which character sets to include — uppercase, lowercase, digits and symbols — and can exclude ambiguous characters like the letter O and the digit 0, or lowercase L and the digit 1, which is handy for passwords you'll occasionally type by hand. The strength meter reflects how the choices you make affect crackability.

The only realistic way to use a unique strong password for every account is a password manager. Generate the password here, save it in your manager, and let it autofill — you never have to remember or retype it. Reusing one password across sites is the single biggest risk, because one breached site then exposes all the others.

Turn on two-factor authentication wherever it's offered. Even a perfect password can leak in a data breach, and a second factor (an app code or a hardware key) stops an attacker who has your password from getting in. For accounts you must type passwords into by hand, a long passphrase of random words is a strong, more memorable alternative.