Generate a strong password

Set the length and character types, then copy. Every password is created locally with your browser's cryptographically secure random generator — it is never sent or stored.

How we measure strength

Strength is shown as entropy in bits, calculated as the password length multiplied by log₂ of the character-pool size. More characters and more variety mean more bits — and exponentially more guesses for an attacker.

• Under 40 bits — Weak. Crackable quickly; avoid for anything that matters.
• 40–59 bits — Fair. Okay for low-stakes logins, not for email or banking.
• 60–79 bits — Strong. A sensible target for most accounts.
• 80 bits or more — Very strong. Practically impossible to brute-force.

Want to test a password you already use? Try the password analyser. To understand the trade-offs, read our security blog.