Password generator
87 characters to draw from
Generated in your browser · never sent, never stored
A strong password is a long one drawn at random. Length beats cleverness by a wide margin: twenty random lowercase letters are far harder to guess than eight characters with a substituted @ and a trailing exclamation mark, because the second one follows a pattern that cracking software tries first.
How to generate a password
The number under the meter is entropy in bits, and it is the entropy of the generator rather than of the string. That distinction matters: this tool knows the password was picked uniformly at random from a pool of a known size, so log2(pool^length) is exactly right. A checker looking at a password somebody invented can only guess, and will happily award "Summer2024!" a score it has not earned. The estimated guessing time assumes an offline attack at ten billion guesses a second, which is roughly one modern GPU against a poorly-hashed database, pessimistic on purpose.
Questions
No. It is drawn by your browser using crypto.getRandomValues, which is the operating system’s own cryptographic generator, and it never leaves the page. Disconnect from the network and the tool still works.
No. The value lives in a variable until the next draw replaces it. Nothing is written to disk, to a cookie or to local storage.
Sixteen characters is a reasonable floor and twenty is comfortable. Beyond about thirty you are past the point where length is the weak link.
They help, but less than people think. Adding four characters of length buys more entropy than adding the symbol set does. Use them where a site demands them.
Because they are hard to tell apart in many fonts. Turn it on for a password you will read aloud or type from paper, off for one that lives in a password manager.
No. The point of a generated password is that it is unique to one account, so a breach of one site cannot open another. That is what a password manager is for.
Yes. People choosing "randomly" reach for the same patterns: a capital at the front, a digit at the end, a word from a small vocabulary, and cracking tools are built around exactly those habits.