Secure Password Generator
Create bulletproof passwords directly in your browser. We don't save or send them to the server.
Estimate for a very powerful attack: 100 billion guesses per second against a stolen hash database. Attacks on live websites are usually far slower.
Why length beats complexity
"M@tr!x99" looks complex, but at 8 characters a modern GPU brute-forces it in a few hours. A random string of 16 plain lowercase letters takes thousands of years to crack — length gives you exponentially more combinations than symbols crammed into a short password.
Why you shouldn't reuse passwords
If the same password protects your email and some small forum, a breach on that forum (and small sites leak constantly) hands over your email too. Attackers run leaked login-password pairs against dozens of popular services — it's called credential stuffing, and the only real defense is a unique password per site.
How this generator works
Your password is generated right in your browser using crypto.getRandomValues — the same cryptographically secure random generator used in banking systems. Neither the password nor any part of it is ever sent to UrusMail's servers — we technically can't see it, even if we wanted to.