Password Generator
Why Use a Strong Password?
Weak passwords are the number one cause of data breaches. A strong password uses a mix of uppercase and lowercase letters, numbers, and symbols to create a combination that's virtually impossible to guess or brute-force.
The National Cyber Security Centre (NCSC) recommends using passwords of at least 12 characters. Our generator defaults to 20 characters for even stronger protection.
How This Tool Works
This password generator runs entirely in your browser using the Web Crypto API (crypto.getRandomValues) — the same cryptographically secure random number generator used by modern browsers for encryption.
No passwords are sent to any server, stored, or logged. Everything happens on your device, making this tool completely private and secure.
Understanding Password Entropy
Entropy measures randomness in bits. A password with higher entropy is harder to crack. The strength meter above estimates entropy based on your chosen character set and password length.
- Below 40 bits — Weak: easily cracked in minutes
- 40–59 bits — Fair: may resist casual attacks
- 60–79 bits — Strong: resistant to most attacks
- 80+ bits — Excellent: virtually unbreakable
Password Best Practices
- Use a unique password for every account
- Never reuse passwords across different sites
- Use a reputable password manager to store credentials
- Enable two-factor authentication (2FA) wherever possible
- Avoid personal information like names, dates, or common words
- Change passwords immediately if a breach is reported