// generator
“Strong” isn't a feeling — it's a number. This generator uses your device's cryptographically secure random number generator and shows you the actual entropy behind every password, not just a green checkmark.
Create several passwords at once using the settings above — useful for provisioning multiple accounts.
Type any password to score it instantly. This runs entirely in your browser — nothing is sent anywhere, logged, or stored.
A 20-character password with three character types is generally stronger than a 10-character one with all four — length is the biggest lever you have.
A strong random password is only practical if you don't have to remember it — pair this generator with a password manager to store what you create.
The entropy figure below the strength bar tells you precisely how much randomness is in your password — aim for 60+ bits for most accounts, 100+ for anything sensitive.
High entropy — a combination of length and character variety that makes brute-force guessing impractical — not the presence of a specific symbol or capital letter.
Yes — it uses your browser's Web Crypto API (crypto.getRandomValues), the same cryptographically secure randomness source used in real security software, not a simple pseudo-random function.
No. Every password is generated and scored entirely in your browser. Nothing is transmitted, logged, or stored anywhere.
No — it protects strongly against guessing and brute-force attacks, but not against phishing, malware on your device, or a breach of the service storing your password. It's one layer of a broader security approach.
Only when there's a reason to — after a suspected breach, or if you're replacing a previously weak or reused password. Frequent unnecessary rotation isn't itself a security benefit.
Avoid plain text notes or sticky notes — if you need a physical backup, store it somewhere genuinely secure, but a password manager is almost always the better solution.