Password Generator
Generate a strong, random password with a strength estimate. Nothing is stored or sent anywhere.
16
Generated using your browser's cryptographically secure random number generator. Nothing is sent anywhere, and passwords aren't stored or logged.
Frequently asked questions
- How random are these passwords, really?
- Each character is chosen using your browser's cryptographically secure random number generator (the Web Crypto API), the same class of randomness source used for encryption keys — not Math.random(), which isn't designed to be unpredictable enough for security purposes.
- What does the strength meter measure?
- It calculates entropy — the number of possible passwords given your chosen length and character set, expressed in bits. This is the correct measure for a randomly generated password: because every character is independently random, there are no dictionary words or patterns for an attacker to exploit, so raw entropy fully describes how hard the password is to guess.
- Is the crack-time estimate accurate?
- It's a rough, order-of-magnitude estimate based on an assumed guessing speed for an offline attack, meant to give context rather than a precise guarantee. Actual crack time depends heavily on how the password is stored (hashing algorithm, attacker hardware), which this tool has no way to know.
- Are generated passwords stored or sent anywhere?
- No. Generation happens entirely in your browser, and nothing is transmitted, logged, or stored — closing or refreshing the page discards it completely.