Generate a random password of any length from the character sets you choose, or a memorable passphrase of random words. Every password is drawn from your browser's cryptographic random source, is never transmitted or stored, and comes with an entropy figure so you can see how strong it actually is.
Password strength is measured in bits of entropy: the base-2 logarithm of how many equally likely passwords the generator could have produced. Adding a character multiplies the possibilities by the size of the pool, so length compounds. A 20-character lowercase-only password carries about 94 bits; a 10-character password using every symbol on the keyboard carries about 65. Longer wins, and it is easier to type.
An offline attacker with the password database, running 100 billion guesses per second against a fast hash. That is deliberately pessimistic - a well-configured site uses a slow hash like Argon2 and rate-limits online attempts, which changes the arithmetic by many orders of magnitude. Design for the bad case.
Six random words from a list of a few hundred carry roughly 55 to 77 bits, comparable to a 12-to-13-character random password, and they are far easier to type on a phone or read aloud. Use one for the handful of passwords you genuinely must memorise - your device login, your password manager's master password - and let the manager generate long random strings for everything else.
Passwords come from crypto.getRandomValues locally. Nothing is transmitted, logged or stored. You can disconnect from the network before generating one and it will still work, which is the easiest way to verify that claim.
At least 16 characters for anything that matters. Length beats complexity: a 20-character password of only lowercase letters has more entropy than a 10-character one using every symbol on the keyboard.
Yes. They are generated in your browser from the Web Crypto API, never sent over the network and never stored. You can disconnect from the internet before generating one if you want to verify that.
They are easier to remember and type at the same strength, which matters for the handful you must memorise. Six random words give about 77 bits of entropy - comparable to a 13-character random password. For everything else, use a password manager and long random strings.
Steuervergleich Kanton Zürich — Gemeindesteuern vergleichen (Deutsch)