Password Generator

Weak and reused passwords are behind the overwhelming majority of account breaches. When a single service is compromised, attackers take the leaked email-and-password pairs and try them against banks, email providers, and social networks — a technique called credential stuffing that only works because so many people reuse the same password everywhere. The single most effective defence is a long, random, unique password for every account, and that is exactly what a generator produces.

What makes a password strong is entropy — the sheer number of possible combinations an attacker would have to try. Length matters far more than complexity: a longer password drawn from a mix of uppercase, lowercase, numbers, and symbols quickly becomes infeasible to brute-force, even with powerful hardware. Predictable substitutions like "P@ssw0rd" offer almost no protection because attackers explicitly test for them. Genuine randomness is the key, and humans are notoriously bad at being random.

This generator uses your browser's cryptographically secure random number generator to build passwords that are truly unpredictable, and it does so entirely on your device — nothing is ever sent to a server. For the best security, pair a generated password with a reputable password manager so you never have to remember or type them, and enable two-factor authentication wherever it is offered.