How to use
- Pick a length — 16+ characters is the modern minimum.
- Toggle the character sets you want (upper, lower, numbers, symbols).
- Optionally exclude ambiguous characters (I, l, 1, O, 0) for easier transcription.
- Click Generate — the strength meter shows entropy in bits.
- Copy with one click.
How strength is measured
We use Shannon entropy: bits = log₂(charset) × length. The threshold guidelines:
| Bits | Strength | Meaning |
|---|---|---|
| < 40 | Weak | Trivially crackable; use only for low-stakes throwaways. |
| 40–60 | Fair | OK for low-value accounts, not for anything you care about. |
| 60–80 | Strong | Resistant to most attacks short of state-actor budgets. |
| 80+ | Excellent | Practically uncrackable. |
Privacy
The password is generated using crypto.getRandomValues — the same cryptographic randomness your operating system provides. Nothing is transmitted, logged, or saved. Reload the page and the password is gone.