What makes a password strong
Strength comes from length and variety. Mixing uppercase, lowercase, numbers and symbols across 16+ characters gives over 100 bits of entropy — effectively impossible to brute-force. The tool shows an entropy estimate so you can see how your choices affect strength.
Private by design
Passwords are built with crypto.getRandomValues entirely on your device. Nothing is transmitted, logged or stored, so even we never see what you generate. Use a unique password per account and keep them in a password manager rather than reusing one everywhere.
Frequently asked questions
How long should my password be?
16 characters or more is recommended for important accounts; longer is always stronger.
Are the passwords stored anywhere?
No. They're generated locally and never saved or uploaded — close the tab and they're gone.
Why avoid similar-looking characters?
The generator skips easily confused characters like O/0 and l/1 so passwords are easier to read and type.
Related tools
This tool runs entirely in your browser — nothing you enter is uploaded or stored.