Strong password generator
Free, and it needs no account. Set the length, choose which kinds of characters to include, and take the result. It is generated here, in this page, and never sent anywhere.
Generated on your device with your browser’s cryptographic random number generator (crypto.getRandomValues). The password is never transmitted, logged or stored.
What makes a password strong
Four things that actually matter.
Every extra character multiplies the work an attacker has to do. Reaching for more symbols in a short password does far less than simply making it longer.
Reuse is what turns one company’s breach into a problem with your email, your bank and your shopping. Unique passwords contain the damage to a single account.
A password you invented has patterns in it, because you are the one who invented it. Generated passwords have none — that is the entire point.
Nobody remembers forty unique twenty-character passwords. That is not a personal failing; it is what a password manager is for.
Questions
Frequently asked.
Is this password generator safe to use?
The password is created in your browser and never leaves it. There is no request to a server, nothing is logged, and nothing is stored — you can disconnect from the internet, generate a password, and it still works.
How long should a password be?
Length does more for you than complexity. Sixteen characters is a sensible floor and twenty is better; this generator defaults to twenty and goes to sixty-four. A longer password from a smaller alphabet beats a short one full of symbols.
Where does the randomness come from?
From crypto.getRandomValues, the browser’s cryptographic random number generator, which draws on the operating system’s entropy. Values that would skew the distribution are discarded and drawn again, so every character is equally likely — an ordinary random function would quietly favour the start of the alphabet.
Why are there no l, I, O, 0 or 1 characters?
They are excluded from every character set because they are the ones people misread and mistype when copying a password by hand. You lose a negligible amount of entropy and save yourself a failed login.
Do you store the passwords I generate here?
No. A generated password only leaves your device if you choose to save it into your Captain Password vault while signed in.
Somewhere to keep it
A strong password you lose is not much use.
Captain Password keeps your logins, passwords and notes in one vault, reachable from the web, your desktop and your phone — signed in with the Horizech account you already have.