Strong random passwords.
The password generator creates strong, random passwords from the character sets you choose — uppercase, lowercase, numbers and symbols. Randomness comes from the browser's cryptographic generator (crypto.getRandomValues), not the predictable Math.random.
Longer passwords drawn from a larger character pool are exponentially harder to guess or brute-force. The tool shows an entropy estimate so you can see how strong each password really is.
Pool sizes: lowercase 26, uppercase 26, digits 10, symbols 24. A 16-character password from all four sets ≈ 16 × log₂(86) ≈ 103 bits.
Yes. It uses crypto.getRandomValues, the same cryptographically secure source browsers expose for keys and tokens, with rejection sampling to avoid bias toward certain characters.
For important accounts aim for 16 characters or more, which gives roughly 100+ bits of entropy — far beyond what brute force can reach. Longer is always better.
No. Generate a unique password per account and keep them in a password manager, so a breach of one service never exposes the others.