Strong Password Generator
Free strong password generator — random passwords with custom length, symbols, numbers and mixed case, generated locally with WebCrypto.
How strong is strong?
Strength is measured in entropy bits: length × log₂(pool size). A 20-character password over all four character sets is ≈130 bits — far beyond brute-force reach. Generation uses crypto.getRandomValueswith rejection sampling (no modulo bias), entirely in your browser: the password never travels anywhere.
- Use a password manager and a unique password per site.
- Length beats complexity — prefer 16+ characters.
Frequently asked questions
Is it safe to generate a password online?
Here, yes — the password is generated locally by your browser's crypto.getRandomValues and never leaves the page. No network request carries it, and we never see it.
How long should my password be?
16+ characters for anything important. Length adds entropy faster than extra symbol types — a 20-character mixed password is ≈130 bits, far beyond brute-force reach.
What does the entropy number mean?
Entropy (in bits) measures how many guesses an attacker needs: n bits ≈ 2ⁿ possibilities. 60 bits is weak for offline attacks, 80 is decent, 100+ is excellent.
Should I reuse a strong password?
Never — one breach exposes every account. Use a password manager and a unique password per site.