Password Generator
Strong random passwords, passphrases and PINs — created instantly in your browser, never sent anywhere
Your passwords
About Password Security
Private by Design
Every password is generated inside your browser using your device's cryptographically secure random number generator (crypto.getRandomValues). Nothing is ever sent to a server, logged or stored — close the tab and it's gone.
What Makes a Password Strong?
Length matters more than clever substitutions. Each extra character multiplies the number of guesses an attacker needs. Aim for 16+ characters for important accounts — or simply keep the 30-character default and let a password manager remember it.
Password or Passphrase?
Random passwords are best when a password manager fills them for you. Passphrases like Falcon-Marble-Sunset-Ember-42 are easier to remember and type, so they're ideal for the few passwords you must know by heart — like your computer login or the password manager itself.
Never Reuse Passwords
When one site leaks, attackers immediately try the same email-password combination everywhere else. Every account should get its own unique password — a password manager makes this effortless.
Add Two-Factor Authentication
Even the strongest password can be phished. Enabling 2FA (an authenticator app or hardware key) means a stolen password alone isn't enough to get into your account.
Reading the Strength Meter
The meter shows entropy — the number of bits of randomness. The crack-time estimate assumes an offline attacker guessing 10 billion passwords per second on modern GPUs. Anything past "centuries" is effectively uncrackable today.