🔐 Password Generator & Strength Checker

What this tool does

It builds a random password from the character types you tick, at the length you choose, using your browser's cryptographic random-number generator - the same source a password manager uses. Nothing is sent anywhere; you can turn your Wi-Fi off and it still works. The checker below scores a password you already have, using only its length and the mix of character types.

When to use it

Any time you need a password you will store rather than remember: a router, a database, an API key in a config file, a one-off login for a contractor. Sixteen characters with all four types ticked is a good default; go longer for anything that guards other passwords, like a password manager's master key. If you need a password you can type from memory, this is the wrong tool - a passphrase of four or five unrelated words is easier to carry in your head and still very hard to guess.

How to read the strength meter

The meter looks at two things: length and how many of the four character types appear. That is the whole rule, and it is deliberately simple. What it does not check: whether the password is a dictionary word, appears in a breach list, or is your name with a year on the end. "Password1!" scores medium here because it is ten characters with four types - and it is still a terrible password, because it is on every attacker's list. The meter measures shape, not originality. Treat "strong" as necessary, not sufficient.

Limits

The symbol set is a fixed list of common punctuation. Some sites reject certain symbols or cap the length; if a generated password is refused, untick symbols or shorten it rather than editing by hand - hand edits make passwords more predictable, not less. The tool does not store or remember what it generates. If you close the tab before copying, it is gone. That is by design.