- No data uploaded
- Instant results
Strong Password Generator
A 16-character password using all four character sets has about 103 bits of entropy — longer than the age of the universe to brute-force at a trillion guesses per second.
Strong Password Generator
—
Generated with your browser’s secure random generator — never sent anywhere.
How the passwords are generated
Each character is picked with crypto.getRandomValues() — the same cryptographically secure generator browsers use for encryption keys — with rejection sampling so every character is equally likely. At least one character from each selected set is guaranteed, then the result is shuffled.
Password best practices
- Use a unique password for every account — a password manager makes this painless.
- Prefer length: 16+ characters beats clever substitutions.
- Turn on two-factor authentication wherever possible.
Password length vs strength (all character sets)
| Length | Entropy | Time to brute-force |
|---|---|---|
| 8 characters | 52 bits | months to years |
| 10 characters | 64 bits | centuries |
| 12 characters | 77 bits | centuries |
| 14 characters | 90 bits | millions of years |
| 16 characters | 103 bits | longer than the age of the universe |
| 20 characters | 129 bits | longer than the age of the universe |
| 24 characters | 155 bits | longer than the age of the universe |
| 32 characters | 206 bits | longer than the age of the universe |
| 64 characters | 412 bits | longer than the age of the universe |
Frequently asked questions
Are generated passwords stored anywhere?
No. They are created in your browser and never sent or saved.
Is 16 characters long enough?
Yes — that is strong for almost any account.