Password Generator

A password generator builds a secret at random instead of letting a person invent one. People reuse, pattern and predict; a generator does not, so the result resists both guessing and the dictionary and rule based attacks that defeat human-chosen passwords.

Its strength comes from two things only: how many characters are drawn, and how large the set they are drawn from is. Everything below follows from those two numbers.

Passwords are generated using the Web Crypto API (crypto.getRandomValues), which provides cryptographically secure random numbers from the operating system's entropy source.

This is fundamentally different from Math.random(), which uses a predictable pseudo-random algorithm unsuitable for security purposes.

• Choose Password or PIN mode using the toggle.
• Adjust length and character set options.
• Click Generate or press Ctrl+Enter to create a new password.
• To check an existing password, type or paste it directly into the password field. The password is automatically masked. Length, character sets, and strength analysis adjust automatically.
• Click the eye icon to reveal or hide the password.

The strength analysis goes beyond charset-based entropy: it detects common patterns like repeated characters, sequential runs, keyboard patterns, and low character diversity. These patterns reduce effective entropy because attackers try them first. Switch the attack scenario to compare crack times across different hash algorithms.

• Use at least 12 characters for important accounts.
• Never reuse passwords across services.
• Use a password manager to store generated passwords.
• For maximum security, enable all character types including symbols.