Security Analysis

Password Generator

Generate strong, random passwords using your browser's cryptographic random number generator. Choose the length and character sets you need -- nothing is generated on a server, logged or stored.

Passwords are generated locally with crypto.getRandomValues(). They are never sent to a server, saved in your browser, or reused between visits.

What makes a password strong

  • Length matters more than complexity: a long password from a large character set is exponentially harder to brute-force.
  • Uniqueness matters most of all -- reused passwords fall to credential stuffing as soon as any one site is breached.
  • Store generated passwords in a password manager rather than a notes file or spreadsheet.
  • Add multi-factor authentication wherever it is offered; it defends the account even if the password leaks.

Security note

Similar-looking characters (0/O, 1/l/I) are excluded so generated passwords can be typed and read reliably. If a site rejects symbols, turn that set off and increase the length instead of weakening the password.