Strong Password Generator

How to use Password Generator

1. Pick a length — 16 characters is a good baseline; 20+ is recommended for anything sensitive.
2. Toggle which character sets to include: lowercase, uppercase, digits, and symbols.
3. Turn on 'Avoid look-alikes' if the password will be typed manually (removes 0/O/I/1/l).
4. Click Generate for a fresh password. Copy it, paste it into your password manager, and never rely on remembering it.

Common use cases

• New account signup. Generate a unique 20-character password per site. Store in a password manager — reusing passwords is the #1 cause of account takeovers.
• API keys and dev secrets. Use 32+ characters with all sets enabled. Copy directly into .env files (never commit .env).
• Temporary shared password. Enable 'Avoid look-alikes' and use 12–14 characters when you need to dictate a password over the phone or paste into chat.
• PIN or numeric code. Enable only 'digits' to generate secure numeric PINs of any length — much stronger than birthdays or repeated digits.

Tips

• Length beats complexity. A 20-char password with only lowercase is stronger than a 10-char password with all sets.
• Never reuse a generated password across sites. Even one breach compromises every account with the same password.
• The generator uses `crypto.getRandomValues()` — the same cryptographic randomness used by browsers for TLS keys.
• Password managers (Bitwarden, 1Password, KeePass) can auto-generate and auto-fill so you never see or memorize your passwords.

Troubleshooting

The site rejects my password.

Some sites impose length caps (16 or 20 chars) or ban specific symbols. Shorten the password or turn off 'Symbols' if a specific site is being finicky.

I need to memorize a password.

Consider a 4-word passphrase instead (e.g., correct-horse-battery-staple). Diceware-style passphrases are memorable and cryptographically strong.