Password Generator

Strong random passwords with an entropy strength meter, powered by your browser's CSPRNG.

Password strength is measured in bits of entropy, and the formula is unromantic: the size of the character set raised to the length, expressed as a base-2 logarithm. That arithmetic is why length beats complexity every time. Adding one more character multiplies the search space by the alphabet size, while swapping an `a` for an `@` adds almost nothing and makes the thing harder to type.

Where randomness comes from matters as much as how much of it there is. A generator built on an ordinary pseudo-random function can be predictable from previous outputs; a cryptographically secure generator is designed so that seeing past values tells an attacker nothing about the next one. This one uses the browser's CSPRNG.

The honest advice is that a generated password you cannot remember is only useful with somewhere to put it. Generate it, store it in a password manager, and never reuse it — reuse is what turns one site's breach into all of your accounts.