How do I create a strong password?+
A strong password should be: at least 12 characters long, include uppercase and lowercase letters, numbers, and symbols, and not contain dictionary words or personal info. This generator creates cryptographically random passwords following all these rules.
What makes a password secure?+
Password security comes from entropy (randomness). A 16-character password using letters, numbers, and symbols has over 95^16 possible combinations — taking billions of years to crack by brute force with current computers.
How long should my password be?+
Minimum 12 characters for personal accounts, 16+ for financial and work accounts. Longer is always better. A 12-character complex password takes centuries to crack; a 6-character password can be cracked in minutes.
Does this password generator store my passwords?+
No. All password generation runs locally in your browser's memory. The generated passwords are never sent to any server, logged, or stored anywhere. When you close the page, the passwords are gone.
Is using a password manager better than remembering passwords?+
Yes. Password managers let you use a unique, strong password for every site without memorizing them. This is far safer than reusing the same password — if one site is breached, your other accounts stay safe.
How do I check if my current password is strong?+
Type your password into the output field. It calculates the entropy in bits from length and character variety, then shows a strength label (Vulnerable / Standard / High-Grade / Fortified) and an estimated time to crack by brute force.
What is a passphrase and is it more secure?+
A passphrase strings together random words (like 'Cable-River-Oak-Mint-42'). It's easier to remember and type than a random string, and a 5–6 word passphrase can exceed 70 bits of entropy — stronger than most manually-created passwords, while staying human-friendly.
What does entropy in bits mean?+
Entropy measures unpredictability. Each bit doubles the number of guesses an attacker must make. 40 bits is weak, 60–70 bits is good, and 80+ bits is effectively uncrackable with today's hardware. This tool shows the exact bit count for whatever you generate or type.
Should I exclude look-alike characters?+
Enable 'No look-alikes' when a password will be typed or read aloud — it removes easily confused characters (O vs 0, l vs 1, I). It slightly lowers entropy per character, so bump the length up a little to compensate. For manager-stored passwords you can leave it off.
Does this store my passwords?+
No. Generation and strength checking happen entirely in your browser; nothing is saved or transmitted.
How long should a password be?+
Aim for at least 12–16 characters. Length adds more security than complexity, so longer passphrases are both stronger and easier to remember.
