Password Generator & Checker
Generate strong passwords, test your existing ones, make PINs and passphrases.
Text & dev tools
12–16 for most accounts; 20+ for email, banking, password manager.
Shoulder-surfing protection. Click the ⧉ button to reveal.
Length beats complexity: a 20-char password with 3 character types out-strengths a 10-char with all 4. And never reuse — one leak becomes ten breaches when passwords repeat.
Password strength — the honest guide
- Length beats complexity — 20 characters with 3 types beats 10 characters with all 4.
- Unique per account — one password per site. Reuse is how one leak becomes ten breaches.
- Store it properly — a password manager beats memorizing weak passwords.
- Passphrases for humans — 4 random words are strong, memorable, and easy to type on phones.
- PINs are for devices, not accounts — use them for SIM locks and banking apps, not as website passwords.
Password Generator — FAQ
Could this site secretly record my password?
You can verify it can't: load the page, disconnect from the internet, and generate — it keeps working because nothing ever leaves your device. Generation uses the Web Crypto API.
What's the strength checker actually measuring?
Shannon-style entropy: how many bits of unpredictability your password has, adjusted down for patterns it detects (repeats, sequences, keyboard walks, common words). The crack-time estimate assumes an offline attack at 10 billion guesses/second — a realistic upper bound for today's GPU rigs.
Why would I use passphrase mode?
Password managers are ideal, but for the one master password you must remember — or passwords you type on a TV remote — random words are far more human-friendly than random characters, at similar strength. 4 words ≈ 51 bits; 5 words ≈ 64 bits.
Is the QR export of a password safe?
It's a static QR — the password is embedded in the image, permanently. Only use it for yourself (e.g., to beam a Wi-Fi password to your own phone), never for sharing, and delete it once used. Anyone who photographs the screen owns the password.
What's "ambiguous characters" for?
Removes lookalikes — 0 vs O, 1 vs l vs I — so you can read or type the password without mistakes. Useful for Wi-Fi keys you'll type on a TV.