Password Generator

Passwords are generated using the Web Crypto API (crypto.getRandomValues), which provides cryptographically secure pseudorandom numbers. Each character is selected uniformly at random from the configured character pool, ensuring every possible combination is equally likely.

Entropy measures the unpredictability of a password in bits. Each bit doubles the number of possible combinations. A password with 80+ bits of entropy is considered very strong against brute-force attacks. Our meter calculates entropy as log2(poolSize) * length, where poolSize is the number of possible characters per position.

For most online accounts, 12-16 characters with a mixed character set (uppercase, lowercase, numbers, symbols) provides adequate security. For master passwords or encryption keys, we recommend 20+ characters. The US National Institute of Standards and Technology (NIST) recommends at least 8 characters for user-chosen passwords and 6+ for randomly generated ones.

Including symbols increases the character pool size from 62 (upper+lower+digits) to 95+ printable ASCII characters. This significantly increases entropy — for a 16-character password, the difference is 95.2 bits vs 76.5 bits of entropy, making brute-force attacks exponentially harder.

This removes characters that are easily confused visually: lowercase l, uppercase I, digit 1, uppercase O, lowercase o, and digit 0. This makes the password easier to read, share verbally, and type correctly, especially on mobile devices or when reading handwriting.

No. All generation happens 100% locally in your browser using the Web Crypto API. Passwords never leave your device — they are not sent to any server, saved in any database, or logged anywhere. This makes the tool safe for generating sensitive credentials including master passwords and encryption keys.

Yes. The tool is fully responsive and works on any modern mobile browser. All features including the entropy meter, character toggles, and copy-to-clipboard are touch-friendly.

The tool classifies passwords into four tiers based on entropy: Weak (below 36 bits — instant cracking), Fair (36-60 bits — minutes to days), Strong (60-80 bits — years to decades), and Very Strong (80+ bits — centuries to millennia). A password reaching 'Very Strong' with 80+ bits of entropy would take billions of years to crack even with powerful consumer hardware.