Generate a strong password

Set the length and character types, then copy. Every password is created locally with your browser's cryptographically secure random generator, it is never sent or stored.

How we measure strength

Strength is shown as entropy in bits, calculated as the password length multiplied by log₂ of the character-pool size. More characters and more variety mean more bits, and exponentially more guesses for an attacker.

• Under 40 bits, Weak. Crackable quickly; avoid for anything that matters.
• 40–59 bits, Fair. Okay for low-stakes logins, not for email or banking.
• 60–79 bits, Strong. A sensible target for most accounts.
• 80 bits or more, Very strong. Practically impossible to brute-force.

Want to test a password you already use? Try the password analyser. To understand the trade-offs, read our security blog.