Strong, random passwords — generated on your device, never sent anywhere.
Strength is estimated from entropy: length × character variety. Longer beats fancier.
Tap Copy, paste it into the site, then save it in a password manager — never reuse it elsewhere.
Yes. They're created in your browser with the Web Crypto API — the same cryptographic randomness your operating system uses. Nothing is transmitted, stored or logged.
Length and randomness. A 16+ character mix of letters, numbers and symbols tops 100 bits of entropy — beyond practical brute force.
12 characters minimum for everyday accounts; 16+ for email, banking and anything important. Every extra character multiplies the cracking time.
No — reuse is the #1 way accounts get taken over after a leak. Generate a unique password per site and let a password manager remember them.