How Does It Work?
- Choose a lengthLength matters more than anything else. Sixteen characters is a sensible default; go longer for anything important.
- Pick the character typesAt least one from each selected type is guaranteed, so the password will pass validation rules that demand a digit or a symbol.
- Generate and copyPress generate as often as you like, then copy. Paste it straight into your password manager.
What Is It Used For?
A password’s real strength is measured in entropy — the number of equally likely possibilities an attacker would have to search. Entropy comes from length multiplied by the size of the character pool, which is why a long password from a modest alphabet beats a short one full of symbols. Everything here happens locally in your browser; the generated password is never sent anywhere, and closing the tab discards it.
- Creating a unique password for a new account.
- Replacing a password that appeared in a data breach.
- Generating credentials for a database, an API key or a service account.
- Producing a batch of passwords for a team or for test data.
- Meeting a site’s rules that demand an uppercase letter, a digit and a symbol.
Examples
| Setup | Pool size | Entropy | Strength |
|---|---|---|---|
| 8 chars, letters only | 52 | ~46 bits | Fair |
| 12 chars, letters + digits | 62 | ~71 bits | Strong |
| 16 chars, all types | 86 | ~103 bits | Very strong |
| 24 chars, all types | 86 | ~154 bits | Very strong |