Password Generator

Passwords are generated using crypto.getRandomValues(), which provides cryptographically secure random numbers. The strength depends on length and character diversity. A 16+ character password with all character types has over 100 bits of entropy, meaning it would take billions of years to brute-force with current computing power.

No, passwords are generated entirely in your browser and are never sent to any server. Your settings (length, character options) are saved locally for convenience, but generated passwords are not stored. Close the tab and the password exists only where you copied it.

For most online accounts, 16 characters with mixed character types is excellent. For high-security needs like master passwords or encryption keys, use 24-32 characters. Avoid passwords under 12 characters as they are increasingly vulnerable to brute-force attacks.

Human-created passwords follow predictable patterns — common words, dates, keyboard walks like "qwerty". Password cracking tools exploit these patterns. A truly random password has no pattern to exploit, making it orders of magnitude harder to crack even if the attacker knows the exact length and character set.