What makes a strong password?
- Length first. Every extra character makes a password exponentially harder to crack, aim for 16+.
- Mix character types. Uppercase, lowercase, numbers and symbols enlarge the pool of possibilities.
- Make it random. Avoid names, dates and dictionary words. This tool uses true cryptographic randomness, not a guessable pattern.
- Never reuse. Use a unique password per account so one breach can’t unlock the rest.
About the strength meter
The meter estimates entropy in bits, a measure of how unpredictable the password is. Roughly: under 40 bits is weak, 60+ is strong, and 90+ is very strong. A 16-character password using all character types comfortably exceeds 90 bits.
Frequently asked questions
Are these passwords really random?
Yes, they use crypto.getRandomValues, the browser’s cryptographically-secure generator.
Can you see my password?
No. Nothing leaves your browser.
What length should I pick?
16+ characters with mixed types is a strong, practical default.