developer desk · password generator
A password, and how strong it really is.
A random password or a passphrase of dictionary words, made in this tab from the browser’s cryptographic random source. Nothing is sent or stored — close the tab and it exists only where you pasted it.
Characters are drawn without the modulo bias of random % n, and the strength is counted from every password these settings could have produced — the one-of-each rule included — rather than estimated from the result.
Once it is in your password manager
To check that a download is the file its publisher released, the hash generator compares it with the published SHA-256.
Check a file’s hashQuestions
Is the password sent anywhere or saved?
No. It is made by your browser’s cryptographic random source inside this tab, and the page does not send, log or store it. Once you close the tab it exists only where you pasted it.
What does the number of bits mean?
How many passwords these settings could have produced, as a power of two. Each extra bit doubles the guessing. The count includes the rule that every chosen set appears at least once, which removes some passwords, so it is slightly lower than length times the bits per character.
Is a passphrase as strong as a random password?
Six words from the 7,776-word EFF list give about 77 bits — about as strong as a random 12-character password of letters, digits and symbols — and are much easier to type and remember. Add a word for about 13 more bits.