What is a Password Generator?
A password generator creates random strings suitable for account credentials. Human-chosen passwords tend toward predictable patterns — names, dates, keyboard walks — that attackers exploit with dictionary and brute-force tools.
Vertex Solutions' generator draws from cryptographically secure randomness in the browser, producing passwords that are impractical to guess through enumeration.
Building Strong Passwords
Entropy — the measure of unpredictability — grows with length and character diversity. A 12-character password using all four character classes has vastly more possible combinations than an 8-character lowercase-only string.
Practical guidelines:
- Length first — Prefer 16+ characters for email, banking, and primary accounts.
- Mix character types — Combine uppercase, lowercase, digits, and symbols when permitted.
- Unique per site — Never reuse a generated password across services. A breach on one site should not compromise others.
- Store in a manager — Copy generated passwords into 1Password, Bitwarden, or similar. Do not save in plain-text notes.
Character Set Options
| Toggle | Characters included | |--------|---------------------| | A-Z | Uppercase Latin letters | | a-z | Lowercase Latin letters | | 0-9 | Digits | | !@# | Symbols including punctuation and brackets |
Disabling all toggles falls back to lowercase letters and numbers. For maximum entropy, enable all sets and set length to 20 or higher.
Understanding the Strength Meter
The strength indicator scores passwords on length and character diversity. It is a quick heuristic, not a guarantee. A "Very Strong" password can still be weak if you reuse it everywhere or if the service stores it improperly.
The meter does not check Have I Been Pwned or similar breach databases. After generating, let your password manager flag compromised credentials if it offers that feature.
Password Manager Best Practices
Generate here, then let your password manager autofill at login. Managers encrypt vaults with a master password and sync across devices. Enable two-factor authentication (TOTP or hardware keys) on the manager itself and on critical accounts.
For Wi-Fi, database, or API keys that machines consume programmatically, consider whether a passphrase (several random words) or a generated string better fits the context. This tool excels at the latter.