Password Generator

Create a random password and see how strong it is.

16 characters

Generated password

.yPl>6)u_Q*VrR*+

Strength rating
Strong (103 bits of entropy)
Estimated offline crack time
Centuries / Trillions of years

How to use it

Formula

Entropy (bits) = length x log2(pool size)
  1. Set the length with the slider, from 6 to 64.
  2. Tick the character types to include.
  3. Read the strength label, entropy and crack time.
  4. Press Copy and paste the password into your password manager.

Labels follow entropy: under 40 bits is weak, 60 good, 80 strong and 128 or more very strong.

Frequently Asked Questions

Is the password really random?
Yes. The tool uses the browser cryptographic random source (crypto.getRandomValues) when it is available, which is built for security use.
Is the password stored or sent anywhere?
No. It is generated in your browser and is not sent or saved. Copy it into a password manager before you close the page.
What is entropy?
A measure of how many guesses are needed, in bits: length x log2(number of possible characters). More bits means a stronger password.
How is crack time estimated?
It assumes an attacker making 100 billion guesses per second against a leaked hash. Real speed depends on how the site stores passwords, so treat the figure as a rough guide.
What does avoid ambiguous characters do?
It leaves out 0, O, 1, l and I, which look alike, so the password is easier to read and type.
How long should my password be?
At least 16 characters for important accounts. Length adds more strength than symbols do.

TechBasket Tools

Published