How to Generate a Genuinely Strong, Random Password
Published 2026-09-12
Password strength isn't really about mixing in a capital letter and a symbol — it's about entropy, meaning how many possible passwords an attacker would have to try before landing on yours. A long, genuinely random string beats a short, pattern-based one every time.
What makes a generator trustworthy
Filenary's Password Generator uses the Web Crypto API's crypto.getRandomValues(), which is a cryptographically secure random number source built into the browser — the same class of randomness used for encryption keys, not the predictable Math.random() that a lot of quick scripts rely on.
Choosing your options
- Length — longer is stronger; 16+ characters is a reasonable modern baseline.
- Lowercase and uppercase letters — widens the character pool.
- Digits — widens it further.
- Symbols — the biggest single boost to entropy per character, if the site you're using it for allows them.
Nothing is transmitted or stored
The password is generated locally in your browser and never sent anywhere — not to a server, not to an analytics tool. Once you close the tab, there's no copy of it left behind on our end because there never was one to begin with.