Strong Password Generator

What makes a password strong?

Length matters most. Each extra character multiplies the number of possibilities an attacker must try. The entropy shown is length × log₂(character pool size): a 16-character password using all four character types has roughly 100 bits, far beyond what can be guessed offline. Current guidance from NIST emphasizes length and uniqueness over forced complexity.

Good password habits

• Use a different password for every account, so one breach cannot unlock the others.
• Store them in a reputable password manager rather than trying to remember them.
• Turn on two-factor authentication (an authenticator app or security key) for email, banking and anything important.
• Use at least 14–16 characters for important accounts.

How this generator works

Characters are chosen with your browser’s crypto.getRandomValues, using rejection sampling so every character is equally likely, and at least one character from each selected type is always included. The password is created on your device and never leaves it.