Password Generator & Strength Checker
Tips for a strong password:
- Use at least 12 characters
- Mix uppercase and lowercase letters
- Include numbers and symbols
- Avoid common words and patterns
- Don't reuse passwords across sites
How the Password Generator Works
Generated passwords are built using the Web Crypto API's crypto.getRandomValues() — a cryptographically secure random number source, not the predictable Math.random(). Each password is guaranteed at least one uppercase letter, lowercase letter, digit, and symbol, then shuffled with the Fisher-Yates algorithm so the character classes aren't in a predictable order.
The strength meter checks any password you type against length, character variety, and a short list of common weak patterns, and offers tips to improve it.
Frequently Asked Questions
Is the generated password truly secure?
Yes — it uses your browser's cryptographically secure random number generator, the same kind of randomness source used for security-sensitive applications, not a simple pseudo-random function.
Is my password sent anywhere?
No — generation and strength analysis both happen entirely in your browser. Nothing is transmitted or stored.
What makes a password strong?
Length matters most — aim for 12+ characters — combined with a mix of uppercase, lowercase, numbers, and symbols, while avoiding common words and predictable patterns.