16
StrengthExcellent
103 bits of entropy from 88 characters, 205 billion years to crack at a trillion guesses a second.
Related Tools
103 bits of entropy from 88 characters, 205 billion years to crack at a trillion guesses a second.
Related Tools
The Password Generator creates strong, random passwords from your choice of uppercase, lowercase, numbers and symbols, drawn from the browser's cryptographically secure random number generator rather than a predictable pseudo-random function. Five appear as soon as the page loads and follow every change you make, with a strength readout that shows the actual entropy in bits and how long the result would survive an offline attack. You can drop look-alike characters for anything you'll have to type by hand, and exclude whatever symbols a stubborn site refuses to accept.
The guide behind this tool
Password Strength: Why Length Beats Complexity Rules
NIST withdrew the advice about symbols and 90-day expiry, and the arithmetic explains why. One extra character is worth more than every symbol on the keyboard.
Set the length and tick the character types you want. Five passwords appear straight away and update as you change anything.
Tick "Exclude look-alikes" if you will be reading the password off a screen, and list any characters the site rejects in the exclusion field.
Watch the strength readout: it tells you the entropy in bits and the time to crack, so you can see what an extra four characters buys you.
Copy the one you like, or press Generate New Passwords for another five.
It uses the Web Crypto API's crypto.getRandomValues(), which is cryptographically secure, rather than Math.random(), which is not suitable for passwords. Each character is drawn by rejecting the bytes that fall in the uneven tail of the range, so no character is quietly more likely than another, which is a bias plain modulo arithmetic introduces.
18+ Free Tools
Explore all categories
From text processing to developer utilities, all free, all instant, no sign-up.