Password Generator

Real-world use cases

• Rotating a database root password after a team member leaves

  When an ops engineer offboards, you rotate the Postgres and Redis root credentials the same day. Set length to 32, enable all four character sets, and tick "exclude look-alikes" so the on-call person reading it off a screen never confuses 0 and O. The entropy meter shows ~196 bits, which is overkill on purpose: this secret lives in a vault, nobody types it twice, so memorability does not matter and raw strength does.

• Creating a master password you will actually remember

  Your password manager's master password is the one secret you must keep in your head and can never reset from the vault. Switch to passphrase mode and pull 6 words, then add a digit and a symbol at the end. You get something like "river-amber-quiet-stone-forge-nine!" at roughly 50 bits, far easier to recall under stress than "kR7!mQ9@zX2#" and well above the 40-bit floor a master password should clear.

• Generating per-service API keys for a side project

  Building a small SaaS, you need distinct secrets for the JWT signing key, a webhook shared secret, and a cron auth token. Generate three separate 40-character passwords with symbols enabled, copy each straight into your .env, and never reuse one across services. Because each draws fresh from crypto.getRandomValues, compromising one key tells an attacker nothing about the others.

• Handing a temporary login to a contractor over a call

  A freelancer needs a one-week account and you are reading the password aloud on a video call. Generate a 16-character password with symbols off and look-alikes excluded so "Il1" ambiguity never bites you. NATO-style spelling stays clean, the meter still shows ~83 bits (Strong), and you flip a calendar reminder to disable the account when the engagement ends.

Common pitfalls

• Reusing one generated password across several accounts. Generate a fresh one per service; that way a breach at site A (say a leaked 2024 dump) cannot unlock site B.

• Picking a short passphrase and assuming words make it strong. A 3-word passphrase is only ~24 bits and crackable in seconds; use 6+ words, or a 20-char random password instead.

• Storing the result in a plain notes app or a chat message. Paste it straight into a password manager; a generated 30-char secret is useless if it sits in a synced clipboard or Slack DM.

Privacy