Strong passwords are long and random — two things humans are bad at and browsers are excellent at. Set the length and character mix; get a password with its strength measured, not guessed.
A password like “Anthony2019!” feels personal and is exactly what cracking tools try first. This generator builds passwords from pure randomness instead: it uses crypto.getRandomValues, the secure random generator built into your browser, with unbiased selection, and guarantees at least one character from every type you switch on. Length runs from 8 to 64, and the strength meter reports the password’s entropy in bits — the honest measure of how long brute force would take — instead of vague “strong” badges. An avoid-look-alikes option drops characters like 0/O and 1/l for passwords you may have to read aloud or type by hand. Everything happens on your device: generated passwords are never sent, logged or stored.
How to use it
Set the length — 16 or more is a good default; longer beats fancier.
Choose the character mix — uppercase, lowercase, numbers and symbols, plus an option to avoid look-alike characters.
Generate and copy — check the strength meter, copy the password into the account and your password manager.
What you get
Secure randomness — crypto.getRandomValues with unbiased sampling, not Math.random.
Adjustable length 8–64 — with at least one character guaranteed from every type you enable.
Honest strength meter — entropy in bits, calculated from length and pool size.
Look-alike filter — drop 0/O, 1/l and friends for passwords you will type by hand.
Frequently asked questions
What makes a password strong?
Length and randomness. Each extra character multiplies the work of guessing, and true randomness defeats the dictionary and pattern attacks that crack “clever” human passwords. Sixteen random characters with symbols are far stronger than a short password full of substitutions.
What does “bits of entropy” mean?
It is the size of the search space expressed in bits: a password with 80 bits of entropy would take about 2^80 guesses to brute-force in the worst case. The meter calculates it as length × log2 of the character pool size.
Are generated passwords stored or sent anywhere?
No. Generation uses your browser’s own secure random generator on your device; this page has no server to send them to and does not save them. Copy the password into your password manager straight away.
Should I use the same generated password everywhere?
No — generate a different one for every account. The generator makes that cheap; a password manager makes it manageable.