Passwords drawn by your own device's cryptographic generator. Nothing is sent to the internet, nothing is stored — not even we see it.
Two ingredients: length and randomness. Every extra character multiplies the work for anyone trying to guess it — a random 16-character password with letters, numbers and symbols would take centuries to crack by brute force. Meanwhile "Name@1990" falls in seconds, because attacks test names, dates and dictionary words first. That's why generation here uses your device's own cryptographic generator (Web Crypto), the same kind banks use — and it happens entirely in your browser: the password never travels over the internet and is never stored anywhere.
Length and randomness. A random password of 16 or more characters, mixing letters, numbers and symbols, is practically impossible to guess. Passwords based on names, dates and dictionary words get cracked in seconds.
No. Generation happens inside your browser, using your device's own cryptographic generator (Web Crypto). The password never leaves your device and we don't store anything.
Ideally use a password manager (your browser's built-in one already helps). And avoid reusing the same password across services: the right approach is a unique password per account.
Characters that are easy to confuse when typing or reading aloud, like the letter O and the number 0, or the letter l and the number 1. The "avoid ambiguous" option removes those characters — useful for passwords you'll type on another screen.
Other free tools from utilzinho.