Strong Password Generator

Passwords for root access, control panels and databases. Generated locally in your browser: nothing is sent to our server.

How the password generator works

The tool creates passwords right in your browser using the Web Crypto API, a source of cryptographically secure randomness. Nothing is sent to our server: the generated string exists only on your device, so it is safe to use for server access and control panels. You choose a length from 6 to 48 characters and pick the character sets: uppercase A-Z, lowercase a-z, digits 0-9 and symbols.

The character sets already leave out look-alike characters that are easy to mistype when entered by hand: zero and the letter O, the digit one and lowercase l or uppercase I. The finished password is copied to your clipboard with one click, so you never have to retype it.

What makes a password strong

Password strength comes down mostly to length and character variety. A short password can be brute-forced in reasonable time; a long one drawn from several sets practically cannot. Follow a few simple rules:

  • Use at least 16 characters for critical accounts: root, databases, your hosting control panel.
  • Mix upper and lower case, digits and symbols rather than letters alone.
  • Never reuse the same password in more than one place.
  • Do not build passwords from dictionary words, dates or names.
  • Store passwords in a password manager, not in a text file or notes app.

Passwords and SSH access

For logging in to a server over SSH, keys are more secure than passwords: the private key never travels over the network and cannot be brute-forced the way a password can. A sensible setup is key-based authentication for SSH, with long generated passwords wherever keys are not supported: control panels, databases and mailboxes. A password manager saves you from memorizing dozens of them.

Frequently asked questions

Is the password sent to your server?
No. Generation happens entirely in your browser via the Web Crypto API, and the string never leaves your device.
How long should a root password be?
For critical accounts such as root or a database, use at least 16 characters drawn from all available character sets.
Why are some similar-looking characters missing?
The character sets skip easily confused symbols such as zero and the letter O, or one and lowercase l, which reduces typos when a password is entered by hand.
Why are SSH keys recommended over passwords?
The private key is never sent over the network and cannot be brute-forced, so key-based login is far more resistant to attacks than password authentication.
How do I avoid memorizing many complex passwords?
Use a password manager: it stores and fills in long unique passwords, so you only need to remember one master password.
Can I use one password for several services?
You should not. If it leaks in one place, every account using it is at risk, so give each service its own password.