Generate a strong random password or a memorable passphrase. Uses crypto.getRandomValues, the browser's secure random source. All generation happens client-side — nothing is ever sent.
<@(rIy1]{z27({C%FHEv-?s-
~153 bits entropy · excellent
// faq
Frequently asked questions
- Is this password generator secure?
- Yes. It uses crypto.getRandomValues (Web Crypto API), a cryptographically secure random source. Passwords are generated entirely in your browser — nothing is transmitted, logged, or stored.
- How long should my password be?
- For human-typed passwords in 2026, aim for 16+ characters with mixed classes, or a 5+ word passphrase (roughly 60+ bits of entropy). For generated secrets stored in a password manager, 24-32 characters is a good default.
- What is a passphrase and when should I use one?
- A passphrase is 4-6 unrelated words (e.g. correct-horse-battery-staple). Passphrases are easier to type and memorize than random strings while still reaching strong entropy — good for master passwords and vault codes you type manually.
- Does entropy really matter?
- Yes. Entropy (measured in bits) is the log2 of the number of possible passwords. 60+ bits resists offline attacks against modern password hashes; 80+ is a comfortable margin for long-lived secrets.
// related

