Генератор надёжных паролей

The strength of a password comes from how many equally likely possibilities an attacker has to search, not from looking complicated. A 20-character random string from a 90-character alphabet is roughly 130 bits of entropy — beyond any brute force. This generator draws from your browser cryptographic random source and shows you the entropy so you can judge the result instead of guessing.

Как пользоваться

1. Choose a length. Twelve is a floor, sixteen to twenty is comfortable, and longer costs you nothing if a password manager is doing the typing.
2. Pick your character sets. Some sites reject symbols, so you can turn them off without weakening the rest.
3. Turn on "remove confusable characters" if the password will ever be read aloud or copied by hand — it drops 0/O and 1/l/I.
4. Copy the one you want, or generate a batch and store them all at once.

Частые вопросы

Is the randomness actually secure?

Yes. It uses crypto.getRandomValues, the browser cryptographic generator, with rejection sampling so no character is slightly more likely than another. Math.random is never used.

Are the passwords sent anywhere?

No. They are generated in your browser and never transmitted. Nothing is logged, and reloading the page loses them permanently.

How much entropy do I need?

Under 50 bits is weak against offline cracking. Around 80 bits is solid for most accounts. Above 120 bits is beyond any foreseeable brute force, and the tool tells you where you are.

Are random passwords better than a passphrase?

For anything stored in a password manager, yes — they are shorter for the same strength. For something you must memorise, a long random passphrase of unrelated words is easier to remember at equal entropy.