About generating strong passwords
A strong password is long and unpredictable. This tool builds one from truly random characters using the Web Crypto API, the secure random source browsers provide for cryptography, rather than the weaker Math.random. It runs entirely on your device, so the password is never sent anywhere and never leaves your screen until you copy it.
What makes a password strong
Two things: length and variety. Length matters most. Each extra character multiplies the number of guesses an attacker needs, so a long password made only of letters can still be far harder to crack than a short one full of symbols. Aim for at least 16 characters wherever a site allows it. Variety, mixing lowercase, uppercase, digits, and symbols, widens the pool each character is drawn from, which adds strength on top of length.
Use the length slider and the character-set checkboxes to match a site’s rules. If a form rejects symbols, turn them off; if it demands a digit, keep digits on. The generator only ever draws from the sets you enable.
Use a manager, not your memory
A random 16-character password is strong precisely because it is impossible to remember, so do not try. Generate a unique one for every account and store them in a password manager. The real danger online is not a weak password on one site; it is reusing the same password everywhere, so that one breach unlocks all of your accounts. A generator plus a manager fixes that: a different strong password for each login, and only one to actually remember.