Why not use a password you make up yourself?
Passwords people invent themselves tend to follow patterns: common words, birthdays, keyboard sequences. They are easily hit by dictionary and brute-force attacks.
Randomly generated passwords have no predictable pattern. With sufficient length and character types, they are far more secure.
How to choose length and character types?
Password strength is determined mainly by length and the usable character range together, with length usually having the bigger impact.
- Everyday accounts: 12–16 characters including both upper and lower case letters and digits
- Important accounts (email, online banking, master account): 20 characters or more, plus special symbols
- When system restrictions are strict, shorten slightly, but going below 12 characters is not recommended
Are these passwords secure?
Passwords are generated with the cryptographic secure random interface provided by the browser (crypto.getRandomValues), not predictable pseudo-random numbers.
The generation process happens entirely on your device. PrivaConvert does not collect, transmit, or save any generated password.
What does "Exclude easily confused characters" do?
Some characters look almost identical in different fonts, such as the digit 0 versus the letters O and o, or the digit 1 versus the letters I and l.
If a password needs to be copied by hand or typed manually, enabling this option avoids misreading and mistyping.
How to keep a generated password safe?
Store passwords in a password manager rather than in memos, chat history, or plain-text browser notes.
Do not reuse the same password across multiple sites, and enable two-step verification for important accounts.