Password Generator — Random, Local, Nothing Typed

Yes, with one condition: this page asks you to type nothing. It generates a password in your browser and shows it to you; there is no field for an existing password, because a tool that asks for one is indistinguishable from a phishing page. The randomness comes from your device’s cryptographic generator — the same one the browser uses for TLS — and nothing is transmitted, logged or stored. Copy the result, paste it into your password manager, and close the tab.

Because entropy grows with length and only logarithmically with the size of the character set. Adding symbols to the pool takes it from 62 to 94 characters — a factor of 1.5, worth about 0.6 bits per character. Adding a character is worth log₂(62) ≈ 5.9 bits. A 20-character lowercase-only password is stronger than an 8-character one with every symbol on the keyboard, and far easier to type. The entropy figure on this page is length × log₂(pool size), so you can see that directly.

A passphrase is several random words joined together — "able-coat-milk-thumb". The advantage is that you can read it, say it and retype it, which matters for the one password you must memorise: your password-manager master password or a disk-encryption key. Entropy is 8 bits per word from this 256-word list, so five words is 40 bits and seven is 56 — a seven-word passphrase is long and strong, and genuinely memorable in a way that "x7$Kq!" is not.

It is an order-of-magnitude illustration, not a promise. It assumes an offline attacker who has stolen a fast hash of your password and can test 10¹¹ guesses per second on specialised hardware, and it reports the average time to search half the space. Real attacks vary hugely: a slow, salted, memory-hard hash (Argon2, scrypt, bcrypt) is thousands of times more expensive per guess, while a site that leaked plaintext or an unsalted MD5 gives the attacker a head start. Read it as “never in practice” versus “this afternoon”, not as a real deadline.

No — and this is the part that matters more than anything on this page. When a site is breached, the leaked password is tried everywhere else the attacker can reach, so one strong password reused across twenty sites is one breach away from twenty compromised accounts. Generate a different one for every site and let a password manager hold them; then strength and uniqueness reinforce each other instead of competing.

There is no server involved. The page is static, the generator runs in your browser using crypto.getRandomValues, and the value never leaves the page. If the tool reports that crypto.getRandomValues is unavailable, it refuses to generate rather than falling back to a weaker source.

Length matters more than the character mix, because entropy grows with every character while the alphabet grows only logarithmically. A 16-character random password from a 94-character alphabet is about 105 bits; a 12-character one is about 79 bits. For a passphrase, six words from a 256-word list is 48 bits, which is weaker than a 12-character random string but far easier to type and remember. Use the longest form you will actually keep unique.

Per character, no; per unit of memorability, often yes. This generator word list has exactly 256 words, so each word contributes exactly 8 bits. A six-word phrase is 48 bits — fine against online guessing and weak against an offline attacker with a fast hash, which is why the page shows the estimated crack time rather than calling it strong. If the destination allows a password manager, a long random string is the safer choice.

Yes, in a password manager, which is what the browser offer usually is. The property that matters most is uniqueness: a reused password turns one breach into many account takeovers, while a unique password stored in a manager is contained. The generator cannot check reuse — that is the manager’s job — so generate a new value for every account rather than rotating one favourite.