How to use the Password Generator
- Adjust the Length slider and select which character sets to include.
- A new password is generated automatically. Click Generate New for a fresh one.
- The strength meter reflects length and character variety. Click Copy to save it to your clipboard.
What makes a password strong?
Password strength comes from two factors: length and character variety. A longer password with more character types has more possible combinations, making brute-force attacks computationally infeasible.
| Length | Character sets | Possible combinations |
|---|---|---|
| 8 | Lowercase only | ~208 billion |
| 12 | Upper + lower + digits | ~3.2 × 10²¹ |
| 16 | All four sets | ~10²⁹ |
| 20 | All four sets | ~10³⁷ |
At 16 characters with all four character types, a modern computer attempting one billion guesses per second would take billions of years to crack the password.
Password best practices
- Use a unique password for every account. If one site is breached, all your other accounts stay safe.
- Use a password manager (Bitwarden, 1Password, KeePass) to store them, you only need to remember one master password.
- Aim for 16+ characters. Length matters more than complexity for most modern attacks.
- Enable two-factor authentication (2FA) wherever possible, a strong password plus 2FA provides defense in depth.
- Never reuse passwords across services, and never share them via email or chat.
Privacy
Generation uses the browser's crypto.getRandomValues() API, cryptographically secure randomness. No generated password is stored or transmitted anywhere.