How to use it
Choose a length and generate. The password is created in your browser; copy it straight into your password manager.
Enter the relevant inputs, run the tool safely, and review a measurable result immediately.
Local utility
This tool does not call an external service. Sensitive inputs are not persisted.
Browser-only generation
Choose a length and generate. The password is created in your browser; copy it straight into your password manager.
Generation uses crypto.getRandomValues from the browser's Web Crypto API - a source designed for cryptographic use, not a predictable generator like Math.random. The character pool excludes characters that are easily confused when read aloud.
Password strength comes from length and genuine randomness, not from complexity rules. A long random password is markedly stronger than a short one with symbols sprinkled through it. Do not try to memorise the output; using a password manager is a precondition for this approach.
Create a password for a new admin account, a database user or a service account.
Useful for system administrators, developers and teams improving account hygiene.
The most common mistake is reusing one strong password across services, where a single breach opens all of them. The second is sending a password over email or chat. The third is shortening the generated value by hand to make it memorable.
The tool only generates. It does not check whether a password has appeared in a known breach, does not audit your accounts, and stores nothing - if you do not copy the value, it is gone.
The password is generated entirely in your browser and never reaches our servers.
No. Generation happens entirely in your browser through the Web Crypto API; the value never goes over the network.
Length matters most. Sixteen characters and above is a reasonable floor for personal accounts, and more for admin and service accounts.
Don't. However strong it is, a reused password turns a single breach into several.