What makes a password strong?
- Length beats complexity. Every extra character multiplies the number of possible guesses. Use at least 14–16 characters.
- True randomness. Human-made passwords follow patterns attackers know. Generated ones do not.
- One password per site. Store them in a password manager so a leak on one site cannot unlock the others.
Frequently asked questions
Are generated passwords stored or sent anywhere?
No. Passwords are created inside your browser and never leave your device. We cannot see them.
Is the result truly random?
Yes. We use your browser’s cryptographically secure random number generator (crypto.getRandomValues), the same source used for encryption keys.
How long should my password be?
At least 16 characters for important accounts. With all character types enabled, that is over 100 bits of entropy — far beyond brute-force reach.