Loading page content
Generates five passwords at once from the Web Crypto API's cryptographic randomness, each scored by an entropy meter that reports actual bits rather than a vague strong/weak badge.
Generate cryptographically secure passwords and API keys. Uses the Web Crypto API for true randomness.
Entropy in bits is the only honest measure of password strength, and it is computed from the size of the character set and the length: not from whether you remembered to add an exclamation mark. Length dominates: a 20-character lowercase-only password has more entropy than a 10-character password using every class on the keyboard. Anything at or above 80 bits is comfortably out of reach of offline brute force with current hardware.
The generation uses crypto.getRandomValues rather than Math.random. That distinction is not academic. Math.random is a predictable PRNG, and passwords generated from it are recoverable if an attacker can observe enough output.