Secure password generator
Create strong random passwords by choosing the length and character types. They are generated with your own browser's cryptography and are never sent or stored anywhere.
What makes a password strong
Our intuition misleads us: we tend to think a password is strong if it has an odd symbol and a capital letter, like "House1!". In reality, what's hardest for an attacker to guess is length combined with randomness. Each extra character multiplies the possible combinations, so a long, meaningless password is far harder to crack than a short one full of symbols but predictable.
Why random beats clever
The passwords we invent follow patterns: a word, a date, a pet's name, a capital at the start and a number at the end. The programs that try passwords know those patterns inside out and start there. A randomly generated string has no pattern to exploit, which is why it holds up far better. This tool produces that randomness inside your browser, without sending the password anywhere.
The two rules that really matter
First: don't reuse the same password across services. If one is leaked, all the rest fall with it. Second: use a password manager. Nobody can remember dozens of long, distinct keys, and the manager stores and fills them in for you, so you only have to memorise one master password. Generating strong keys stops being a chore when one tool creates them and another remembers them.
An alternative: passphrases
A memorable option is a passphrase: four or five unrelated random words. They're long, easy to type and very resistant. Whatever your method, the essential thing is that every important account (email, bank, social media) has a unique, long-enough key.