Long
Length matters most. Aim for at least 12 characters — 16 or more is better.
Create strong, secure passwords instantly. Everything happens in your browser — passwords are never sent or stored.
Length matters most. Aim for at least 12 characters — 16 or more is better.
Avoid names, dates and dictionary words. True randomness is far harder to guess.
Use a different password for every account so one breach can't unlock the rest.
Combine uppercase, lowercase, numbers and symbols to grow the possible combinations.
Yes. Passwords are generated locally using your browser's cryptographically secure random number generator (crypto.getRandomValues). Nothing is transmitted over the network, logged, or stored.
Strength is estimated from entropy: password length × log₂(number of possible characters). Under 40 bits is weak, 40–59 fair, 60–79 strong, and 80+ bits is very strong.
Easy to say uses letters only, so the password is simpler to read aloud. Easy to read removes characters that look alike (such as l, 1, I, O and 0) to prevent typing mistakes.
Use a reputable password manager so you only have to remember one strong master password, and turn on multi‑factor authentication wherever it's offered.