Good password habits
- Length matters most. With the same character types, each extra character makes a password much harder to guess.
- Use a different password for every site, so one leak does not expose your other accounts.
- Store passwords in a password manager, and turn on two-factor authentication for important accounts.
- Adjust the options to match a site’s rules, such as length limits or which symbols are allowed.
How it works
Characters are picked with your browser’s built-in cryptographic random generator (crypto.getRandomValues), without bias toward any character. Each selected character type appears at least once. Passwords only appear on this screen and are never sent or stored.
Strength is a rough estimate: length × log₂(number of possible characters).
FAQ
Are generated passwords stored anywhere?
No. Everything happens in your browser; nothing is sent or saved.
How long should a password be?
Aim for 16 characters or more where the site allows it. Longer is better.
What if a site does not allow symbols?
Turn symbols off and add a few more characters to keep a similar strength.
For reference only. Actual amounts and decisions depend on your contract, your workplace and how the authorities apply the rules.