Password Generator

About the Password Generator

The mathematics of password cracking is brutal: an 8-character password using only lowercase letters falls to a modern GPU in minutes, while a 16-character mix of cases, digits, and symbols would take centuries with the same hardware. Length does the heavy lifting, and unpredictability does the rest — which is exactly what a generator provides and human brains cannot.

This generator creates cryptographically random passwords using your browser’s Web Crypto API (the same entropy source used for HTTPS). Choose length and character sets — uppercase, lowercase, digits, symbols — and optionally exclude look-alike characters (O/0, l/1) for passwords you must read aloud or type from paper. Every password is generated locally; nothing is transmitted, stored, or logged.

Pair generated passwords with a password manager: one unique 16+ character password per site converts every future breach from "my whole digital life" into "one account, reset in a minute".

How to use the Password Generator

1. 1 Set the length — 16+ for important accounts, 12+ minimum anywhere.
2. 2 Toggle character sets: include symbols for maximum strength, disable look-alikes if you will type it by hand.
3. 3 Click Generate; the password appears with a live entropy estimate.
4. 4 Copy with one click straight into your password manager, then generate the next one — never reuse across sites.

Key features

Who uses the Password Generator?

• Creating a unique password for every new account signup.
• Admins issuing initial credentials that meet organisational complexity policies.
• Wi-Fi passwords for home routers — WPA2 passwords become the network’s master key.
• Encrypting password-protected archives and documents shared by email.
• Recovering from a breach: rotating every reused password methodically.

Tips and best practices

• Length beats cleverness: a 20-character lowercase password often outranks a 10-character symbol soup — and is easier to type.
• Never reuse passwords across sites. Password managers make uniqueness free; reuse is what turns one breach into ten.
• Enable two-factor authentication everywhere — a strong password plus TOTP or hardware key survives phishing that defeats either alone.
• For memorable-but-strong passphrases, use 4+ random unrelated words; avoid quotes, song lines, and keyboard walks (qwerty patterns).
• Rotate immediately on any breach notification for that service; otherwise, scheduled rotation mostly causes weaker, predictable passwords.
• Security questions are passwords too — generate random answers and store them in the manager.

Frequently asked questions