Secure Password Generator

Passwords are generated using crypto.getRandomValues(), the cryptographically secure random number generator built into the browser. This ensures each password is truly random and unpredictable, unlike generators based on Math.random() which are not suitable for security purposes.

Entropy measures the randomness of a password in bits. It is calculated as log2(N^L), where N is the character set size and L the password length. A password with 40 bits of entropy is weak, 60 bits is medium, 80 bits is strong and over 80 bits is very strong. The higher the entropy, the harder it is to guess the password.

For a good level of security, a minimum length of 16 characters with uppercase, lowercase, numbers and symbols is recommended. For critical accounts like banks or main email, at least 20 characters is recommended. For passphrases or encryption keys, 32 characters or more.

No, passwords are generated entirely in your browser and are never sent to any server. No data leaves your device. Once the page is closed or refreshed, the passwords will no longer be recoverable.

Length above all. Every extra character multiplies the possibilities, far more than swapping a letter for a symbol does. Sixteen characters drawn at random beat eight clever ones by a wide margin.

From the cryptographic random number generator of the browser, not from the ordinary one used for shuffling lists. That is the difference between a password that cannot be predicted and one that looks random.

No. It is generated in the page and never leaves the device: nothing is sent to a server and nothing is stored. Closing the page is enough to make it disappear for good.

Yes, and not because we promise it: this tool runs entirely inside your browser. What you type or upload never leaves your device, so it never reaches a server of ours and there is nothing we could keep, read or lose. You can check it yourself: open the page, disconnect from the internet, and the tool keeps working.

No. There is no database behind this tool: we do not store your files, your text or your results. When you close the tab nothing is left — not here with us, because it never arrived, and not anywhere else.

We do not profile you: there is no account to create, we never ask for your email to use a tool, and we keep no profile of what you do. We are an Italian company and we work under the GDPR and the other European rules, with the privacy notice and the consent request in plain sight. One thing we say in full rather than hiding it behind a slogan: the ads on the page are Google's, and Google may use cookies to personalise them. You decide from the consent banner: if you say no the ads stay, but they are not personalised, and the tool works exactly the same.

From the ads on the page, and that is all. We do not sell your data, there is no hidden paid plan, there is no limit that eventually asks for your card, and you do not have to sign up. The ads pay for the servers and for the time we spend writing the tools: that is how we can keep them open to everyone.