Choose a length
Start with 16 or more characters when the website allows it. Increasing length usually provides the largest improvement.
Strong Password Generator
Create a cryptographically secure random password on your device. FreNiMi never sees, stores, or sends it.
Generate a safer password in seconds
The generator uses cryptographic randomness supplied by your browser and provides an estimate of the resulting search space without sending the password anywhere.
Select allowed characters
Match the website's password rules. Avoid ambiguous characters when you expect to type the result manually.
Copy and store securely
Save the result in a reputable password manager and use a different password for every account.
Private cryptographic password generation
This generator uses crypto.getRandomValues(), the browser cryptographic random-number API, rather than Math.random(). It also uses rejection sampling when selecting characters to avoid modulo bias.
The displayed entropy estimate describes the theoretical search space for the selected length and character pool. It is not a promise about how long a particular attacker would need, because real-world resistance depends on the service's password hashing and rate limits.
Password security checklist
- Use a unique password for every account.
- Store passwords in a trusted password manager.
- Turn on phishing-resistant multi-factor authentication when available.
- Never send a password through an untrusted message or form.
Frequently asked questions
Does FreNiMi save my password?
No. The password is generated locally in your browser and is never sent to FreNiMi.
How long should my password be?
Use at least 16 characters when the service permits it. Longer unique passwords generally provide a larger search space.
What does avoid ambiguous characters do?
It removes easily confused characters such as zero, capital O, lowercase l, and capital I, which is useful when a password must be typed manually.
Can I use this for important accounts?
Yes, provided you store the result securely, never reuse it, and enable multi-factor authentication where available.