Password Generator

Password security comes from entropy — the number of possible combinations an attacker must try. A 12-character password using uppercase, lowercase, numbers, and symbols has about 79 bits of entropy, meaning roughly 600 sextillion possible combinations. At 10 billion guesses per second, that takes centuries to crack.

Length matters more than complexity. A 20-character lowercase password has more entropy than an 8-character password with every character type. The math: 26^20 (lowercase only, 20 chars) vastly exceeds 94^8 (all printable ASCII, 8 chars). This is why modern guidance favors long passphrases over short complex passwords.

This generator uses your browser's crypto.getRandomValues() — a cryptographically secure random number generator. Unlike Math.random(), it's suitable for security-sensitive applications. Never use online generators that don't run client-side — if the password touches a server, it's potentially compromised.