Password Generator
🔒 Runs in your browser
·
How strong is a random password?
Strength is measured in entropy bits: length × log₂(pool size). Sixteen random
characters drawn from all four classes give ≈105 bits — far beyond what offline cracking rigs
can search. Length helps more than exotic symbols: each extra character multiplies the search
space by the whole pool size.
Generated locally, never stored
Randomness comes from your browser's crypto.getRandomValues — a cryptographically
secure generator — with rejection sampling so every character is equally likely. The meter uses
the zxcvbn estimator, which also catches dictionary words and keyboard patterns in case you edit
the password by hand. Use a password manager; reuse is the real risk.
Frequently asked questions
Are the generated passwords sent anywhere?
No. Passwords are generated with the Web Crypto API in your browser and never leave your device.
How random are the passwords?
Characters are drawn with crypto.getRandomValues using rejection sampling, so every character in the pool is equally likely — no modulo bias.
What makes a password strong?
Length beats complexity: a 16+ character random password from a large pool resists offline cracking. The meter estimates entropy and real-world guessability.