How does it work?
- A strong password is already waiting: press “Copy the password”.
- Don’t like it? “Another one!” or the space bar makes a new one; the shortcuts change the length and characters in one tap.
- In the settings, pick the length (8 to 64) and the characters, and leave out look-alikes (0 and O, 1 and l).
Good habits
- A different password for every site: if one leaks, the others stay safe.
- Keep them in a password manager: it remembers them for you.
- Turn on two-factor authentication for important accounts (email, bank).
- Length matters more than symbols: 16 characters is already very strong.
Frequently asked questions
Is the password sent anywhere?
No. It is created in your browser, by its random generator built for cryptography, and it is neither sent nor stored: only your settings (length, characters) stay on your device. Reload the page: it’s gone.
How is the strength calculated?
From the number of passwords the generator can create with your settings, expressed in bits: each extra bit doubles an attacker’s work. The time shown assumes a pessimistic scenario: a hacker has stolen the database of a poorly protected site and tries 100 billion passwords per second with graphics cards; on average, they have to try half of the possibilities. On a well-run site, which stores passwords with a deliberately slow algorithm, they would go millions of times slower. And on the login page, the site blocks them after a few attempts.
What length should I choose?
16 characters with all types are plenty for an online account. For a password vault or an encryption key, aim for 20 to 32. Below 12, a password becomes crackable.
Why avoid look-alike characters?
For a password you copy by hand or read out loud (Wi-Fi, router): 0 and O, 1, l and I are easily confused. Removing them lowers the strength very slightly, and the gauge takes it into account.
A site rejects my password: what can I do?
Some sites limit the length or the symbols they accept. Untick “Symbols” or choose “Simple”, then make another one.
