Password Generator

Passwords are generated using crypto.getRandomValues(), which provides cryptographically strong random values. This is the same randomness source used by security applications.

A strong password has high entropy -- it's long, uses multiple character types (lowercase, uppercase, numbers, symbols), and is truly random (not based on words or patterns).

Yes, the password is generated entirely in your browser and never sent anywhere. We recommend copying it directly to a password manager.

A passphrase is a sequence of randomly chosen words separated by a delimiter. Passphrases like "Correct-Horse-Battery-Staple" are easier to remember while still providing strong security through the large number of possible word combinations.

The estimate assumes an attacker using a modern GPU cluster capable of 10 billion guesses per second. The time shown is the average brute-force time based on the password's entropy (number of possible combinations).