Tools
Password Generator
Strong passwords from your browser’s cryptographic generator. Created on your device and never stored.
Very strong · 150 bits of entropy
GPU cracking at 100 billion guesses per second: longer than the age of the universe
Passwords are created in your browser with crypto.getRandomValues — the operating system’s cryptographically secure generator. They are never sent or stored: reload the page and they are gone. Only the settings are remembered.
Частые вопросы
How strong are these passwords?
Every character is picked by the operating system's cryptographically secure generator (crypto.getRandomValues) without bias. A 24-character password with all four types has about 150 bits — no amount of computing power can guess it.
Is the password stored anywhere?
No. Passwords are created in your browser and live only on the page: they are not sent to a server and are not kept in browser storage. Only the settings — length and character sets — are remembered.
What do entropy and cracking time mean?
Entropy in bits is the base-2 logarithm of the number of all passwords with these settings: each bit doubles the search. Cracking time assumes the worst realistic case — 100 billion guesses per second on GPUs against a leaked database with a fast hash.
Why use a memorable password?
It is made of syllable words like "Bakotu-Rimesa-47-Venodi": easier to read, dictate and type on a phone. Four words with a number give over 80 bits — enough even for a master password, as long as it is not reused.
Why exclude look-alike characters?
0 and O, 1, l, I and | are easy to mix up when you copy a password from a screen or dictate it. Without them entropy is slightly lower — the strength estimate on the page accounts for that.