Stop inventing passwords that are either weak or impossible to type. The built-in generator uses cryptographic randomness to create unique, unguessable passwords — then saves them directly to your vault.
Full control over what gets generated — length, character types, and readability.
Set password length from 8 to 128 characters using a slider or input field. The strength meter updates in real time as you adjust. Most services accept passwords up to 64 characters — use 24+ for maximum security with comfortable copying.
Toggle uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and symbols (!@#$%^&*) independently. Mix and match to meet any site's specific password requirements — some ban symbols, some require them.
Optionally exclude visually similar characters — 0/O, 1/l/I, S/5, G/6, B/8 — that cause confusion when reading a password aloud or copying from a printed sheet. Useful for passwords that need to be typed manually.
Generate a passphrase of 4–8 random words from a curated word list (e.g., "correct-horse-battery-staple"). Passphrases are easier to remember and type while remaining mathematically harder to brute-force than short random strings.
Real randomness — not the fake kind that patterns emerge from.
The generator uses crypto.getRandomValues() — the browser's Cryptographically Secure Pseudo-Random Number Generator (CSPRNG). It draws entropy from the OS, hardware events, and timing noise. This is the same source used by TLS and key generation. Not Math.random().
Weak generators use pseudo-random algorithms seeded with time — predictable if an attacker knows when the password was created. CSPRNG produces statistically uniform output with no exploitable patterns, regardless of when or how many times you generate.
The generator displays the entropy of the current configuration in bits (e.g., "94 bits"). Entropy measures how hard the password is to brute-force: each additional bit doubles the search space. 80+ bits is considered strong; 128+ bits is considered uncrackable with foreseeable hardware.
Generate and save without switching tabs or copying into a separate tool.
A dice icon next to every password field opens the generator inline. Set your preferences and click "Use this password" — the field is filled and the password is saved with the item. No copy-paste between tools.
Access the full generator from the dashboard sidebar anytime — useful when creating an account somewhere and you need a strong password before adding it to your vault. Copy with one click, then add the new credential entry.
Don't like the result? Click "Regenerate" as many times as you want — there's no limit. Each click produces a completely independent output from fresh entropy. Your preferences are preserved between regenerations.
When people create passwords, they unconsciously follow patterns — keyboard walks, name + year, common substitutions. Attackers use these biases to crack passwords orders of magnitude faster than pure brute force.
Password reuse is the most common reason accounts get compromised after a breach. When every site gets a unique generated password, one breach can't cascade to all your other accounts.
Enterprise systems, banking sites, and government portals all have different password requirements. Configure the generator for any combination of requirements and get a compliant password instantly.