Password Generator

What makes a password strong?

A strong password is long, random, and unique. Length matters most: a randomly generated 16-character password drawn from letters, digits, and symbols has about 105 bits of entropy, which puts a brute-force attack far beyond practical reach. Randomness must come from a generator, not a human, and every account needs its own password so one breach cannot unlock the rest.

How strong is my password?

Type or paste a password to estimate its entropy and the time a brute-force attack would need. The check runs entirely in your browser. Nothing is sent anywhere, logged, or stored, and the field never autosaves.

How long does it take to crack a password?

The table shows the average time to brute-force a truly random password at 10 billion guesses per second, a rate achievable by a multi-GPU rig attacking a fast hash such as MD5 or NTLM. Slow hashes like bcrypt or Argon2 multiply every figure by thousands. All values are computed directly from pool size and length, so you can verify them yourself with the formula in the entropy section.

How to create a strong password?

Follow these five steps to generate and store a password that will outlast any realistic brute-force attack. Pick a length of 16 characters or moreSet the length slider to at least 16. At full charset that yields about 105 bits of entropy, comfortably above the 80-bit benchmark for resisting offline attacks. Enable all four character setsKeep lowercase, uppercase, digits, and symbols switched on.

Random password vs passphrase: which should you use?

Both reach strong entropy. The right choice depends on whether a password manager types it for you or you type it yourself. What to avoid