How to generate a strong password
- Choose a random password for password-manager storage or a passphrase when you need something easier to type.
- Keep the default length or increase it where the account permits.
- Copy the result directly into the account and save it in a reputable password manager.
- Use a different generated password for every account.
- Enable multifactor authentication or a passkey when available.
Your generated password stays on this device
Metricivo uses your browser’s Web Crypto API to generate the result. The password is not sent to Metricivo, written to browser storage, added to the URL, or included in analytics. Refreshing or closing the page discards it.
Why cryptographic randomness matters
Predictable random-number functions are unsuitable for passwords. This generator uses crypto.getRandomValues(), which browsers provide for cryptographically strong random values. Character choices use rejection sampling so every allowed character has an equal chance of selection.
Password length and character rules
For generated passwords, length usually contributes more strength than awkward substitutions. Metricivo defaults to 20 characters and supports up to 128. It guarantees at least one character from every selected group, but some websites impose their own maximum lengths or permitted symbols.
Current NIST guidance emphasizes allowing long passwords and avoiding arbitrary composition rules as the primary defense. Website operators should also block commonly compromised passwords, rate-limit attempts, and store passwords using appropriate salted password hashing. This generator cannot verify how another website protects your password.
Random passwords versus passphrases
A fully random password is compact and ideal when a password manager will save and fill it. A passphrase uses randomly selected words and can be easier to type. Metricivo’s passphrases draw from a 2,048-word local list; five random words plus a number provide substantially more possible combinations than a phrase invented from a quotation or personal facts.
Frequently asked questions
Does Metricivo save generated passwords?
No. There is no account, history, storage, or server request containing the generated value.
Can I use the same password more than once?
No. Reuse allows one compromised service to expose other accounts. Generate a unique password for every login.
Is the strength estimate a guarantee?
No. It estimates the mathematical search space assuming genuinely random generation. Phishing, malware, password reuse, insecure recovery processes, and poor storage by a website are separate risks.
Should I send a generated password to someone?
Avoid email and ordinary chat. Use a trusted password manager’s secure-sharing feature or another approved secure channel, and rotate temporary credentials after use.
Security guidance reviewed: October 4, 2026 · See an issue? Request a correction.