Password generator
Set the length and kinds of characters. Every change gives new passwords, each with a copy button.
How long should a password be?
Length matters most. 16 random characters from letters, digits and symbols give about 100 bits of entropy: even at 10 billion guesses a second, guessing would take billions of years. Use 16–20 characters in a password manager and at least 12 for Wi-Fi.
Where does the randomness come from?
Passwords come from the browser’s cryptographic random number generator (crypto.getRandomValues), the same one secure connections use. Every character is equally likely, and the password is never stored or sent.
Good habits
- A different password for every site, so one leak doesn’t open the rest.
- A password manager remembers them for you.
- Turn on two-step verification for important accounts.
Common questions
Are the passwords stored anywhere?
No. They are made in your browser, aren’t in the page code or its address, and disappear when you close the tab.
What does “no look-alikes” do?
It leaves out characters easy to confuse when typing: capital I, lowercase l, digit 1, capital O, lowercase o, digit 0 and the bar |. The password is a touch weaker but easier to copy by hand.