Strong Password Generator

'Strong' is not a feeling, it is a number. With all four character classes and 16 characters you get roughly 103 bits of entropy; the meter above shows the figure for whatever you actually generate, so the label and the maths stay in sync.

The defaults on this page are chosen to be the ones we would not change: maximum character variety, enough length to survive offline attack, and every character class enabled because sites that reject symbols are increasingly rare.

How to use it

1. Generate — the defaults are already the strong configuration.
2. Check the bit count under the password, not the colour of the bar.
3. Store it, then verify the site accepted the full length by logging out and back in.

What 'strong' should mean

A useful definition: strong means the cost of guessing exceeds the value of the account plus the cost of rotating it. That threshold is around 80 bits for a normal account and above 100 bits for anything you cannot change quickly.

Complexity rules that force one symbol and one digit add very little. A site that demands a symbol but caps you at 12 characters is weaker than one that lets you use 20 letters. When you have a choice, spend your effort on length.

Reviewed 2026-10-21. This tool runs entirely in your browser — no server, no account, and nothing you generate is stored.