Developer utility

Password generator

Надёжные пароли на основе криптослучайности — всё в браузере, без отправки на сервер

Select at least one character set
Strength—
16

About strong passwords

Recommendations

  • • 12–16 characters or more
  • • A unique password for every service
  • • Store them in a password manager

Security

  • • Generated via Web Crypto, not Math.random
  • • The password never leaves your browser
  • • Enable two-factor authentication

Strong passwords

What makes a password strong

Strength is determined by entropy — the length and the size of the character alphabet. The tool lets you set the length and character sets, and the randomness comes from a cryptographic source, not from the predictable Math.random.

A unique password for each service matters more than the complexity of one: if one site’s database leaks, the other accounts are not affected.

Extra protection

Enable two-factor authentication — even a strong password does not protect against phishing or a leak. The second factor blocks login with the password alone.

For webmasters and site owners this is especially critical: compromising access to hosting, the CMS or the admin panel leads to a hack and a loss of search positions.

Frequently asked questions

Is the password generated on a server?+

No. The password is created entirely in your browser using a cryptographic random number generator (the Web Crypto API) and is not sent anywhere. This is safe.

What should a strong password be like?+

At least 12–16 characters, with lowercase and uppercase letters, digits and special characters, without dictionary words or personal data. The longer and more varied the character set, the longer it takes to brute-force.

Why exclude look-alike characters?+

Characters like l, I, 1, O, 0 are easy to confuse when typing or dictating manually. The option to exclude look-alike characters makes the password more convenient where it has to be entered by hand.

How should I store generated passwords?+

In a password manager — this way you can use a unique complex password for each service and not memorize them. Reusing one password is the main cause of account compromise.