Password Generator

What makes a password strong

Strength comes from entropy, a measure of how many guesses an attacker would need. Entropy grows with both length and the size of the character set. Length matters more than complexity: a long passphrase of plain words can beat a short string of symbols because each extra character multiplies the search space.

The math, briefly

Each character drawn from a pool of N options adds log2(N) bits of entropy. A 12-character password from the 94 printable ASCII symbols carries roughly 78 bits, which is far beyond what offline cracking can brute-force today. Add characters before you add exotic symbols; the length lever is stronger.

Example

Weak:   Summer2024!      (predictable pattern)
Better: 7xQ$pL2#vR9mZ    (random, mixed set)
Also strong: correct-horse-battery-staple

The passphrase works because four random common words already produce a huge number of combinations, and it is far easier to type and remember than a wall of symbols.

Randomness is the whole point

A generator is only as good as its random source. A secure one uses a cryptographically strong random number generator, not a predictable pseudo-random sequence seeded from the clock. Patterns a human would pick, like substituting @ for a, add almost no real strength because attackers already model those tricks.

FAQ

Do I still need symbols if the password is long? A long random password is strong on its own, but many sites force a mix, so including them keeps you compatible with those rules.

Should I reuse one strong password everywhere? No. One breach then exposes every account. Use a unique password per site, which in practice means a password manager.

Are generated passwords stored anywhere? A client-side generator creates them in your browser and should never transmit them. Still, copy it straight into your manager rather than leaving it on screen or in clipboard history longer than needed.