How it is calculated

Each character is picked with crypto.getRandomValues, the browser’s cryptographic generator, without bias. At least one character of each selected type is guaranteed, then everything is shuffled randomly.

Entropy = Length × log₂(Possible characters)

Assumptions and limitations

Indicative strength levels: under 60 bits weak, 60–79 fair, 80–99 strong and 100 or more very strong.

Some sites reject certain symbols; if you get an error, turn symbols off.

This tool is educational and provides estimates. It is not a credit offer or financial advice. Actual terms are set by each institution.

Frequently asked questions

Is it safe to use an online password generator?

This generator creates passwords in your browser with the Web Crypto API (crypto.getRandomValues). Nothing is sent to our server or stored. Even so, save new passwords in a trusted password manager.

How long should a password be?

Longer is stronger. NIST guidance favors length over complex rules; a randomly generated password of 15 characters or more is a strong choice for important accounts.

What does entropy mean?

Entropy, in bits, estimates how hard a random password is to guess: each extra bit doubles the number of possibilities. It assumes the password was generated randomly, as here.

Should I reuse a password?

No. Use a different password for each account and turn on multi-factor authentication when it is available.