Password Generator FAQ

Passwords and passphrases are generated locally in your browser with the Web Crypto API. PassRule does not send, store, or log generated results.

A properly random generator avoids predictable personal patterns. The result still needs to be unique for that account and saved somewhere you can access securely.

There is no single length accepted everywhere. Use the longest unique random password a website permits; 16 or more characters is a practical starting point, and PassRule's default random password is longer.

Follow the website's rules. A long, unique random password matters more than satisfying a particular character mix, but some forms still require symbols or specific character types.

Use a multi-word passphrase when you must type it manually and the site accepts longer values. Keep it unique, avoid personal details, and store it in a password manager when possible.

Yes. Reusing a password lets a breach at one service put other accounts at risk. Generate a fresh value for every account, especially email, banking, work, and social accounts.

Usually, yes. A trusted password manager makes it practical to keep long, unique passwords without memorizing each one. Protect the manager with a strong unique main password and multi-factor authentication.

Check the form for a maximum length, allowed symbols, banned characters, and required character types. In Website Requirement Mode, set those visible rules and generate again.

No. A rule link contains configuration only, such as length and allowed characters. It never includes generated passwords or passphrases.

Change the affected password promptly, change it anywhere it was reused, and enable multi-factor authentication. Review account recovery details and active sessions for important accounts.