Password Generator

A password is only as strong as its randomness. The most common way accounts get compromised is not exotic hacking — it is reused, guessable, or too-short passwords appearing in breach databases. A good generator removes the human element and produces passwords that are genuinely unpredictable.

What makes a password strong

Strength comes down to entropy — the number of equally-likely possibilities an attacker would have to try. Entropy is roughly the password length multiplied by the bits contributed per character, which depends on the size of the character set. A 16-character password drawn from uppercase, lowercase, digits, and symbols has about 100 bits of entropy — far beyond what any brute-force attack can exhaust.

Length beats complexity

Adding one character multiplies the search space by the size of the alphabet; adding one symbol type only widens it slightly. That is why a longer password from a smaller set often beats a short password with every symbol. When in doubt, make it longer.

How this generator works

Every character is selected using `crypto.getRandomValues`, your browser's cryptographically-secure random number generator, with rejection sampling so no character is even slightly more likely than another. The password never leaves your device — it is not transmitted, logged, or stored. Close the tab and it is gone.

Practical tips

- Use a unique password for every account; a password manager makes this effortless. - Turn off "look-alike" characters only when you will type the password by hand from print. - Pair strong passwords with two-factor authentication wherever it is offered. - Never reuse a password across sites — one breach then compromises them all.