password-generator

Overview

A strong password is the first line of defense for every online account you own. With computing power doubling roughly every two years (Moore's Law), passwords that were 'strong' a decade ago can now be cracked in hours by consumer GPUs. Modern guidance — codified in NIST 800-63B — emphasizes length over complexity: a 16-character random password is exponentially harder to crack than an 8-character one with mixed cases and symbols. Generated passwords also avoid common mistakes like dictionary words, personal information, and reused patterns.

How It Works

This generator pulls cryptographically-secure random characters from your selected character set (lowercase, uppercase, digits, symbols). 'Cryptographically secure' means the randomness uses your browser's crypto.getRandomValues API rather than Math.random — the difference matters because Math.random is predictable, while crypto APIs are designed to be unguessable even with full knowledge of recent outputs. All generation happens locally; the password never leaves your device.

When to Use This

Generate a new password every time you sign up for a new service, then store it in a password manager (1Password, Bitwarden, KeePass) so you don't have to remember it. Rotate passwords for sensitive accounts (email, banking) annually or after any data breach involving that service. Generated passwords are essential for any account you cannot afford to lose — your primary email account, in particular, controls password resets for everything else.

Frequently Asked Questions