Generate a strong, random password in your browser. Pick the length and character sets and it builds one using your device's cryptographically secure random generator. Nothing is sent over the network or stored — close the tab and it's gone.
Length beats complexity: a long password drawn from a big character set is exponentially harder to crack. Aim for at least 16 characters, mix in symbols and numbers, and — crucially — use a different password for every account. That last rule is impossible to keep in your head, which is exactly why a password manager exists: you remember one master password, it remembers the rest.
Yes. It runs entirely in your browser using the Web Crypto API (a cryptographically secure random generator). Nothing is transmitted, logged or stored — the password only exists in your tab.
At least 16 characters; 20+ is better for important accounts. Length matters more than swapping letters for symbols, though using multiple character sets helps too.
If one site is breached, reused passwords let attackers into your other accounts. Unique passwords contain the damage to a single account.
You don't — that's what a password manager is for. You memorise one master password and it securely stores and fills the rest. For teams, Passpack adds shared encrypted vaults.
This tool is free and runs entirely in your browser. The link above is an affiliate link: we may earn a commission if you sign up, at no extra cost to you, and it never changes our honest take.