A password generator with a bit of fun
Every password here is built with your browser's cryptographic random generator — the same class of randomness used for real security — and never leaves your device. Choose a length from 8 to 32 characters and mix uppercase, lowercase, numbers and symbols. As you tweak the settings, a rank climbs from Apprentice all the way up to Dark Lord of Cybersecurity, so you get instant, playful feedback on how strong your choice really is.
What the bits actually mean
The meter shows entropy in bits, a proper measure of how hard a password is to guess. Each extra bit doubles the number of possible combinations, so a 12-bit jump makes a password thousands of times harder to crack. Length matters more than any single trick: a long password drawn from a large character set reaches high entropy fast, which is why the slider goes all the way to 32.
Staying safe with strong passwords
Use a unique password for every important account, and let a password manager remember them so length is never a burden. Longer is almost always better than clever substitutions like '@' for 'a', which attackers already expect. Because this generator runs entirely in your browser and uses secure randomness, you can generate as many as you like without anything being logged or transmitted.
Frequently asked questions
Are the passwords really random?
Yes. They use crypto.getRandomValues(), the browser's cryptographically secure random source, with unbiased sampling — not the weaker Math.random().
Is my password sent anywhere?
No. Everything happens locally in your browser. Nothing is stored or transmitted to any server.
How do I create a strong password?
Make it long and unpredictable: 16 or more characters mixing upper and lower case, numbers and symbols, with no names, dates or dictionary words.
Is a passphrase better than a complex password?
Often yes. Four or five random words are easy to remember and very long, which makes them strong — as long as the words are truly random.
Should I use a different password for each site?
Yes. Reusing one password means a single leak exposes every account. A password manager makes unique passwords practical.