—
Generate strong, random passwords — free, no sign-up, nothing leaves your browser.
A password's strength comes mainly from how many possible combinations an attacker would have to try, not from how hard it is for a human to remember. Adding length increases that number exponentially, while adding complexity rules (like requiring a symbol) increases it only slightly. A long, random passphrase is often both stronger and easier to type correctly than a short, heavily-punctuated one. This is also why reusing the same password across multiple sites is risky even if the password itself is strong: if one site is breached and passwords leak, attackers routinely try the same combination on other services — a technique called credential stuffing. A unique, generated password per account, kept in a password manager, avoids this regardless of how strong any individual password is.
Yes — passwords are generated using your browser's cryptographically secure random number generator, the same standard used for security-sensitive applications, not a general-purpose random function.
Yes, if you have multiple character types selected, the generated password is guaranteed to include at least one of each, then the rest is filled and shuffled randomly.
It's a measure of how many guesses, on average, it would take to find the password by brute force — expressed in bits, where each additional bit doubles the number of possible combinations. Higher is stronger; it's a useful way to compare two passwords' theoretical strength, though real-world security also depends on things like how the password is stored and whether it's ever reused.
Only if the site's password field genuinely won't accept them — some older systems have restrictive rules. Otherwise, leaving all character types on gives you a stronger password for the same length.
No. Passwords are generated and displayed entirely in your browser — nothing is sent to a server, and nothing is stored after you leave the page.