Password Generator
Generate random, memorable or PIN passwords with secure randomness. Nothing is stored or sent.
Use the tool
> password
…
Excellent103 bits of entropy
At 10 billion guesses per second, cracking this by brute force would take longer than the age of the universe on average.
An estimate for a fast offline attack. Real sites also rate-limit guesses, which helps you, but a leaked fast hash is the case worth planning for.
> type
Characters are drawn with crypto.getRandomValues and picked without modulo bias. Nothing is sent, saved or logged. Only your settings are kept in this browser.
> how to use it
- 01
Choose Random, Memorable (words) or PIN.
- 02
Set the length or word count and which characters to allow.
- 03
Check the strength meter and crack-time estimate, then copy. Refresh for a new one.
- 04
Raise the count to generate a batch and copy them all at once.
FAQ
Password Generator questions.
How long should a password be?
Longer is stronger. Sixteen random characters is a solid default, and twenty or more is better for accounts that matter. A memorable password of five or six random words is also strong.
Is this generator safe?
Passwords are made in your browser with crypto.getRandomValues, with unbiased selection so every character is equally likely. They never leave your device and are not saved.
How is strength estimated?
From entropy: the number of possible passwords your settings can produce, in bits. The crack time assumes 10 billion guesses per second, an offline attack on a fast hash, and the average case.
When should I use a PIN?
Only where a wrong guess locks you out or slows down, like a phone or bank card. A PIN has far fewer combinations than a password.
How do I remember strong passwords?
Use a password manager, and turn on two-factor authentication wherever it is offered.