🔑 Password Generator

How these passwords are generated

Characters are drawn from crypto.getRandomValues(), your browser’s cryptographically secure random number generator — not Math.random(), which is predictable and unsuitable for secrets.

Selection uses rejection sampling, discarding random values that would otherwise bias the result towards early characters in the alphabet. Every character in your chosen set is therefore equally likely.

Entropy explained

Entropy measures how hard a password is to guess, in bits. Each additional bit doubles the search space. As a rough guide:

• Under 50 bits — weak; crackable by a determined attacker
• 50–75 bits — reasonable for low-value accounts
• 75–100 bits — strong for most purposes
• Over 100 bits — excellent; suitable for master passwords and keys

Good practice

• Use a unique password for every account
• Store them in a reputable password manager
• Turn on two-factor authentication wherever it is offered
• Length beats complexity — prefer longer over exotic

Privacy

Generation happens entirely in your browser. No password is ever sent to a server, logged or stored.