Password generator vs password manager: which do you need?

They solve different halves of the same problem, and using one without the other barely helps.

Passwords Published October 20, 2026 2 min read

What each one does

A generator answers 'what should the password be'. A manager answers 'what was it again'. Generating a strong password and then storing it in a notes app gives up most of the benefit.

GeneratorPassword manager
Creates a random passwordYesYes
Remembers itNoYes
Fills it into login formsNoYes
Works without an accountYesUsually not
Stores anythingNothingEverything, encrypted

Why this site does not store passwords

A web page that stores your passwords is a single point of failure with an unusually attractive target painted on it. Building that safely requires end-to-end encryption, audited clients and a business model that does not depend on your data — which is a different product, not a feature.

So this tool stops at generation. What you do with the result should be a dedicated password manager, where the storage, sync and autofill problem is the entire point of the product.

How to choose a manager

Look for end-to-end encryption with a key only you hold, an independent security audit, and export. Export matters more than people think: it is the difference between choosing a manager and being locked into one.

Whatever you choose, the master password is the one credential you must memorise. Make it a six-word passphrase and write it down once, stored somewhere physically secure — a written copy in a locked drawer is a reasonable trade for a password that must never be forgotten.

Frequently asked questions

Can I use just a generator?

Only if you have some other reliable way to store and retrieve the passwords. Without that, the generated passwords will be reused or reset constantly, which defeats the point.

Are browser-built-in password managers good enough?

They are better than nothing and adequate for many people. Their weakness is portability — they are tied to one browser ecosystem, and export is often clumsy.

Should the master password be generated?

Generated or constructed, but it must be memorised. A six-word passphrase is the practical middle ground; a random 20-character string is stronger but you will not remember it.

Tools that go with this guide

More guides