Generate a strong password
Runs in your browserThe string above is built by your browser with its crypto random source and is never sent to WebJi® or anyone else. Paste it once into the account or your password manager, then close this page.
What a strong password generator returns
Anything you invent yourself leans on names, dates and words a guessing routine already tries first. A generated string has no such anchor, which is why it wins before length even enters the math. Paste each result once — into the account itself or into a password manager — and never into a chat or a shared note.
This page does not send the string to WebJi®. Copy it into a password manager, or into the account you are protecting, and then leave the page.
How to read password length and entropy
Entropy is the unpredictability of the string, counted in bits. On the mix above, an 8-character result is about 52 bits. A 16-character result is about 104 bits. That gap is the difference between a string routine guessing can reach and one it cannot.
Prefer 16 characters for email and for the hosting panel. Use a different result on every account. A passphrase of several random words is another long form, and it still has to be unique.
Which account passwords stay separate
A hosting panel password, a mailbox password, and a database password are three strings. This page does not reset webmail, write wp-config.php, or set a MySQL, PostgreSQL, or SQL Server password. Change those in the panel or the database.
cPanel hosting and business email hosting each keep their own login. A mailbox that bounces is an MX record lookup, not a new password.
Frequently Asked Questions
How do I create a strong password?
Use a random mix of upper case, lower case, digits and symbols, and read the length before you save it. An 8-character mix is about 52 bits. A 16-character mix is about 104 bits. Store a different result for each account.
What makes a password strong?
Length and randomness. A long random string is stronger than a short word with one symbol added. The bit counts on this page are the way to read that difference: about 52 bits at 8 characters, about 104 bits at 16.
How long should a password be?
Use at least 16 characters for an account that matters, such as email or the hosting panel. Eight characters is about 52 bits on the mix described here. Sixteen is about 104 bits.
Are online password generators safe?
A generator is safe when it builds the string in your browser and does not send it anywhere. The generator on this page uses the browser's crypto random source and never transmits the string to WebJi®.
What is a passphrase?
A passphrase is several random words in a row. It can be long enough to be strong and still be something you can type. It is a different shape from the 16-character mixed string, and it still has to be unique to one account.
Should I use a password manager?
Yes, when you cannot remember a different long string for every account. The manager stores the results. This page does not store them.
Is this tool really free?
Yes. The generator on this page runs in your browser, is free, and asks for no signup or email.
Does this page set a server or mailbox password?
No. It does not reset webmail, write wp-config.php, or set a MySQL, PostgreSQL, or SQL Server password. Those are changed in the panel or the database, and each one should be its own string.