Password Generator

How to use the Password Generator

1. A 16-character password with letters, numbers and symbols is ready as soon as the page loads.
2. Adjust the length and the types of characters. A new password is generated each time you change an option.
3. Select Copy, then paste it into the sign-up form or your password manager. Select Generate new for another one.

Examples

• Everyday accounts: 16 characters with all four types gives about 103 bits of randomness, far beyond what can be guessed.
• A site that rejects symbols: untick Symbols and use 20 characters to keep a similar strength.
• A Wi-Fi password you'll type on a TV: tick Avoid look-alike characters so 0 and O, or 1 and l, can't be mixed up.
• A PIN-style code: select only Numbers. Use at least 6 digits, and only where the service limits attempts.

How the passwords are generated

Every character is chosen with the Web Crypto API (crypto.getRandomValues), the same source browsers use for encryption keys. Random values that would make some characters more likely than others are discarded and redrawn, so every allowed character has exactly the same chance. Math.random is never used.

The password always contains at least one character of each type you select, in a random position. It's created in your browser and isn't stored, logged or sent to CHARTOVANA or anyone else.

What the strength figure means

Strength is shown in bits: the password's length × log₂ of the number of possible characters. Each extra bit doubles the number of guesses an attacker would need. Around 60 bits is enough for most online accounts; 80 or more is a good target for anything important. Length adds strength faster than extra character types.

Use it well

• Use a different password for every account, so one breach doesn't expose the others.
• Store passwords in a password manager rather than a note or spreadsheet.
• Turn on two-factor authentication where it's offered.