Generate strong, secure passwords that are virtually impossible to crack. All generation happens in your browser — nothing is sent to any server.
Generate multiple passwords at once
The Password Generator builds strong, random passwords and passphrases that are extremely hard to crack, with a live strength meter and estimated crack time — all generated locally in your browser so nothing ever leaves your device.
Entropy in bits answers one question: how many guesses would it take to be certain of finding this? Each extra bit doubles that. Assuming an attacker guessing offline at 10 billion attempts per second — a fair order of magnitude for a decent GPU rig against a fast hash:
The critical point: entropy describes how the password was generated, not how it looks. "P@ssw0rd!" looks like a 9-character random string worth 59 bits. Against a real attack it's a common word plus substitutions that are in every cracking tool's default rules file, and it falls essentially instantly. Anything from your head is predictable; anything from a cryptographic RNG is exactly as strong as the arithmetic says.
Use a passphrase for anything you type by hand or say out loud — device logins, your password manager's master password, WiFi, disk encryption. Six random characters are miserable to enter on a TV remote; six words are fine.
Use 16 random characters for everything that lives in a manager and gets pasted. There's no reason to make it memorable.
This generator measures passphrase strength honestly, by words rather than characters. Scoring six lowercase words by their letters suggests about 141 bits; the truthful figure is 77.5, because an attacker who knows you used a passphrase generator guesses words. Plenty of strength meters get this wrong and will cheerfully call a four-word phrase "very strong" when it falls in about four days.
The QR Code Generator's WiFi mode solves the social half of the problem: it lets you run a genuinely strong network password that guests join by pointing a camera, instead of dictating twenty characters across a room. Print it and stick it inside a cupboard door. It removes the main practical reason people keep weak WiFi passwords.
The full breakdown — including which five accounts to fix first, and why your email outranks your bank — is in the guide on passwords and passphrases. The entropy formulas and crack-time assumptions are on the methodology page.
Length and randomness. A strong password is long (16+ characters), mixes upper and lowercase letters, numbers, and symbols, and avoids dictionary words or personal info. The strength meter and crack-time estimate show how resistant your password is.
Yes. Passwords are generated locally in your browser using secure randomness and are never transmitted or stored. Close the tab and they are gone.
A passphrase is a sequence of random words that is long and easy to remember but very hard to guess — often stronger than a short complex password.
Yes. Reusing passwords means one breach can compromise many accounts. Generate a unique password per site and store them in a reputable password manager.