Password Generator
The Password Generator creates strong, random passwords that are resistant to brute force and dictionary attacks. Strong passwords are essential for protecting online accounts, and this generator creates passwords with customizable length, character sets, and complexity. You can include uppercase, lowercase, numbers, and special characters, and generate passwords from 8 to 128 characters. The generator uses cryptographically secure random number generation to ensure unpredictability.
Formula
Password strength factors: - Length: 12+ characters recommended - Character set: 4 sets (upper, lower, digits, symbols) - Entropy: log2(charset^length) bits - 12 chars, 94 charset = 78 bits entropy Brute force time: 2^entropy / guesses_per_second
Example
12-character password (all sets): K9#mR2!pL7$xQ 16-character password (all sets): B3$nW8@kF5#hJ2&mN Entropy calculation: 12 chars x 94 possible = 78 bits Brute force: ~10^23 years at 10^9 guesses/sec
How to Use
- Select password length (12-128 characters)
- Choose character types to include (uppercase, lowercase, numbers, symbols)
- Click generate to create a random password
- Copy the password to your password manager
- Generate a new password for each account
Frequently Asked Questions
What makes a strong password?
A strong password is long (12+ characters), uses a mix of uppercase, lowercase, numbers, and symbols, and is not based on dictionary words, personal information, or patterns. Length matters more than complexity — a 16-character password with only lowercase is stronger than an 8-character password with all character types.
How long should my password be?
Minimum 12 characters for most accounts. 16+ characters for sensitive accounts like email, banking, and password managers. Each additional character exponentially increases the time needed to crack it.
Is this generator secure?
Yes. The generator uses the Web Crypto API (crypto.getRandomValues), which provides cryptographically secure random numbers. This is the same API used by banks and security applications. It is far more secure than Math.random().
Should I use the same password for multiple accounts?
Never. If one account is compromised, all accounts with the same password are at risk. Use a password manager (Bitwarden, 1Password, KeePass) to generate and store unique passwords for each account.
Are passphrases better than passwords?
Passphrases (like 'correct-horse-battery-staple') can be stronger and easier to remember than short complex passwords. A 4-word passphrase from a 2000-word dictionary has about 44 bits of entropy, comparable to a 7-character random password.