The passwords humans invent are the passwords attackers guess first — names, dates, keyboard patterns, and dictionary words with a '1!' appended. This generator creates truly random passwords using your browser's cryptographic random source, generated locally and never sent anywhere.
工作原理
Choose a length and character set. Each character is drawn independently via crypto.getRandomValues — the same secure source used for encryption keys — from a set that omits look-alike characters (I/l, O/0) to prevent transcription errors.
公式
With letters, numbers, and symbols the set holds ~70 characters (≈ 6.1 bits each). A 16-character password thus carries about 98 bits of entropy — far beyond practical brute-force reach.
计算示例
At 10 billion guesses per second, a random 16-character password from the full set would take on the order of 10¹⁰ years to exhaust — versus under an hour for a typical 8-character human-made password found in leaked-password lists.
常见问题
How long should my passwords be?
16+ characters for anything important; 12 as an absolute floor. Length beats complexity: each added character multiplies the search space by the whole charset size.
How am I supposed to remember these?
You're not — that's what password managers are for. Memorize one strong master passphrase, and let the manager hold a unique random password per site, which also contains the damage of any single breach.
Is generating a password online safe?
This generator runs entirely in your browser using the cryptographic API; nothing is transmitted or stored. Still, for the highest-stakes secrets, a reputable password manager's built-in generator is the gold standard.