About the Password Generator
The Password Generator creates secrets with the browser's Web Crypto API — the same CSPRNG your browser uses for TLS. Choose length (8–64), character classes and optionally exclude ambiguous characters; the tool shows the resulting entropy in bits with a strength label. Five candidates are generated per click so you can pick one that is easy to transcribe.
Everything happens locally — no password is ever transmitted or logged. Need a hash of an existing secret for comparison? Use the Hash Generator.
They are produced with the Web Crypto API (crypto.getRandomValues) directly in your browser — a cryptographically secure random source. Nothing is generated on or sent to any server.
For anything important: 16+ characters with mixed character sets, which lands around 100 bits of entropy — far beyond brute-force reach. For master passwords and infrastructure secrets, go 24+.
Entropy (in bits) measures how many guesses an attacker needs: each additional bit doubles the search space. 60 bits is weak for offline attacks, 80 bits is solid, 100+ bits is effectively uncrackable with current hardware.