How this password generator creates strong passwords
A password is only as strong as the size of the space an attacker has to search. This generator builds a character pool from the sets you tick, then draws each character independently from that pool using the browser's cryptographic random number generator. Every character class you add widens the pool, and every extra character multiplies the number of possible combinations — which is exactly why length matters more than complexity.
- What entropy means
- Entropy is measured in bits. Each additional bit doubles the guessing work. Around 60 bits is good for casual accounts, 90 bits is strong, and 128 bits or more is excellent.
- Length beats complexity
- A 20-character password using only letters and numbers beats a 10-character password that uses every symbol on the keyboard. Raise the length first, then add variety.
- Nothing leaves your device
- Passwords are built with crypto.getRandomValues() right in the page. No round trip to a server, no logging, no storage.
Password security best practices
- Use one unique password per account, so a single breach cannot cascade.
- Store everything in a reputable password manager, protected by a long master password.
- Aim for 16+ characters, and 20+ for email, banking and cloud accounts.
- Enable two-factor authentication wherever it is offered.
- Rotate a password immediately after any service reports a breach.
- Never reuse a password across a work account and a personal account.