Secure Password Generator
Generate cryptographically strong, random passwords with full control over length and character sets. Uses the browser's built-in crypto.getRandomValues() API — no patterns, no server logging. Suitable for account passwords, API keys, database credentials, and secret tokens.
Password Options
Advanced Options
Password Security Tips
- Use a unique password for every account
- Aim for 16+ characters — length is the strongest factor
- Mix uppercase, lowercase, numbers, and symbols
- Store in a password manager (Bitwarden, 1Password)
- Enable 2FA on every account that supports it
- Never reuse passwords across multiple accounts
Password Strength Guide
Entropy & Randomness
Password strength is measured in bits of entropy. More entropy = longer to brute-force.
• 8 chars (a-z): ~38 bits — crackable in minutes
• 12 chars (mixed): ~72 bits — years of cracking time
• 16 chars (full set): ~99 bits — functionally uncrackable
• 20+ chars: ~124 bits — astronomically secure
Recommended Length by Use Case
Account Passwords
16+ chars, mixed types. Use a unique password per service.
API Secrets
32+ chars, all character types. Store in env vars, never in code.
Database Creds
24+ chars. Exclude ambiguous characters for config file readability.
Wi-Fi Passwords
20+ chars. Avoid symbols hard to type on mobile keyboards.