← All tools

Everyday · Security

Strong Password Generator

Truly random passwords, generated on your device — with a live strength meter so you know exactly what you're getting.

Private by design: passwords are generated with your device's cryptographic random number generator and never leave this page.

How it works. Every character is picked with crypto.getRandomValues() — the same cryptographic randomness your browser uses for TLS. The strength meter shows entropy in bits: the number of guesses an attacker would need on average is 2^(bits−1). Anything above 80 bits is effectively unguessable; a 16-character password with all four sets sits around 105 bits.

Questions, answered

How strong is a 16-character password?

A random 16-character password using all four character sets has about 105 bits of entropy — far beyond brute force. Length beats clever substitutions every time.

Are my passwords sent anywhere?

No. Generation happens entirely in your browser. Nothing is uploaded, logged, or stored — close the tab and it's gone.

Can I reuse one strong password everywhere?

Don't — one breach would expose every account sharing it. Generate a unique password per site and store them in a password manager.