Password Generator

This generator uses the Web Crypto API (crypto.getRandomValues) to produce cryptographically secure random values directly in your browser. No passwords are ever sent to a server.

Random Password

Each character is selected independently from your chosen character set (uppercase, lowercase, digits, symbols). A 16-character password with all character types enabled provides ~105 bits of entropy, which would take billions of years to brute-force even with modern hardware.

Passphrase

Passphrases string together random words (e.g., Breeze-Canyon-Dragon-42) to create passwords that are easier to remember. Four words from this tool's 200-word list provide about 30.6 bits of entropy before the optional number. For a high-value master password, use more words or a full Diceware-style word list.

What Makes a Password Strong?

• Length matters most — each additional character multiplies the number of possible combinations exponentially
• Use all character types — mixing uppercase, lowercase, numbers, and symbols increases the search space attackers must cover
• Avoid patterns — dictionary words, keyboard patterns (qwerty), and personal info are tried first by attackers
• Use unique passwords — never reuse passwords across different accounts
• Consider a passphrase — 4+ random words are easier to remember and can be stronger than a short complex password