Generate strong, cryptographically secure random passwords. Choose length, character sets, and quantity — or use a memorable passphrase. Everything runs in your browser using the Web Crypto API. No passwords are ever transmitted to a server.
A password's strength is measured in bits of entropy — a mathematical measure of how unpredictable it is. Each bit of entropy doubles the number of guesses an attacker needs to try. A 20-character password using all character sets (uppercase, lowercase, numbers, symbols) has roughly 130 bits of entropy, making brute-force attacks computationally infeasible even with the most powerful hardware available today.
Length matters more than complexity. A 20-character lowercase-only password is far harder to crack than an 8-character password with special characters. The best strategy is to use both: long passwords with a diverse character set. This generator uses the browser's crypto.getRandomValues() API to ensure cryptographically secure randomness — the same quality of randomness used in encryption keys.
crypto.getRandomValues() — CSPRNG.txt