Secure Password Generator

Why shouldn't I just come up with my own password?

Human beings are incredibly predictable. When someone is asked to create a password, they almost always use a combination of their child's name, their pet's name, their birth year, or their favorite sports team. The problem is that modern hackers don't guess passwords by typing them into a keyboard—they use massive automated botnets that can guess millions of combinations a second.

If you use a password like Lakers1985!, an automated dictionary attack program will crack it in less than 5 seconds. To a computer, a password must have a high degree of mathematical "entropy" to be secure. This means it must be totally, completely random.

The math behind a strong password

The strength of a password relies entirely on two factors: the length of the string, and the variety of the character pool (lowercase, uppercase, numbers, and symbols).

If you use a 6-character password with only lowercase letters, there are only about 308 million possible combinations. A modern graphics card can brute-force that in a fraction of a second. However, if you use this tool to generate a 16-character password utilizing the full spectrum of letters, numbers, and symbols, the number of possible combinations explodes to roughly 3.27 × 10^31. It would take a supercomputer millions of years to crack it.

Is this generator safe to use?

Yes! In fact, it is significantly safer than most other generators on the internet. Many "free" password generators send your newly created password back to their servers via an API. Our tool is built using 100% client-side Javascript. When you click the generate button, the mathematical calculation happens entirely on your own local device.

Furthermore, our tool utilizes the window.crypto.getRandomValues API built into modern browsers. This is a Cryptographically Secure Pseudorandom Number Generator (CSPRNG), which is vastly superior and more mathematically random than standard Javascript math functions.