Password Generator

Strong passwords, made on your device

Each password is built with your browser's cryptographic random number generator (crypto.getRandomValues), the same source used for encryption keys. At least one character from every type you select is guaranteed, and the result is shuffled so the position of each type is unpredictable. Nothing is sent over the network or saved.

How strong is strong enough?

• Strength is shown in bits of entropy: each extra bit doubles the number of guesses needed.
• Under 50 bits is weak, 70+ bits is strong, and 100+ bits is very strong — beyond any realistic brute-force attack.
• A 16-character password using all four types is about 100 bits.

Passphrases

Several random words joined by a separator — like Maple-orbit-quiet-tiger-lamp-42 — are much easier to type and remember than random characters. Five words plus two digits give roughly 53 bits; use six words for important accounts.

Good habits

• Use a different password for every site, and store them in a password manager.
• Turn on two-factor authentication for email, banking and social accounts.
• If a site rejects some symbols, choose “Few (!@#$)”.