Are these passwords safe? Where are they generated?

Every password is generated on your own device using the Web Crypto API — your browser's cryptographically secure random number generator, the same class of randomness used for encryption keys. Nothing is sent to a server, logged, or stored. Reload the page and the password is gone. You can verify this by opening your browser's Network tab or disconnecting from the internet; the generator keeps working.

What makes a password strong?

Length matters more than anything else. A random 16-character password is far harder to crack than a short one with a few symbols bolted on. Aim for at least 16 characters, use a mix of character types, make every password unique to one account, and store them in a password manager so you never have to remember them.

Do you store or transmit the passwords I generate?

No. There is no server involved in generating your password. The tool runs entirely in your browser, so the passwords never leave your device — they are not uploaded, saved to any database, or visible to us in any way.

Should I use symbols and numbers?

Including more character types increases the number of possible combinations per character, so it strengthens a password of a given length. That said, adding four or five characters of length usually adds more security than adding symbols. If a website rejects certain symbols, turn them off and simply increase the length instead.

Password Generator

Strong, truly random passwords — generated on your device, never sent anywhere

100% Private — your data never leaves your device

Passwords are generated in your browser with a cryptographically secure random generator. Nothing is sent, logged or stored — reload and it's gone.

Strength: — 0 bits of entropy

Length 20

Uppercase A-Z Lowercase a-z Numbers 0-9 Symbols !@#$%

Exclude look-alike characters I l 1 O 0 o No repeated characters

Generate several at once

Nothing leaves your device

No server, no logging, no storage. Your password exists only in your browser until you copy it.

Truly random

Uses the Web Crypto API — cryptographically secure randomness, not the predictable Math.random().

See the strength

A live entropy estimate shows how hard your password would be to guess as you change the settings.