Password Generator

Generate secure random passwords or memorable passphrases using cryptographically secure randomness.

Strength: Excellent (~102 bits)
Mode

Generates random passwords, or memorable passphrases made of words, using your browser's cryptographically secure random number generator. Passwords are created on your device and never sent anywhere; a new one appears whenever you change an option or press Regenerate.

How to use it

  • Random — 6 to 128 characters from the sets you choose: lowercase, uppercase, numbers and symbols (!@#$%^&*()_+-=[]{}|;:,.<>?). At least one character from each chosen set is included. Exclude ambiguous, on by default, leaves out O, 0, I, l and |, which are easy to misread.
  • Memorable — 2 to 10 words, 6 by default, joined by a separator of your choice and optionally capitalised. Each word is drawn independently, so one can repeat. Four words in the list carry their own hyphen, such as t-shirt.
  • Include — comma-separated text that must appear, such as a required symbol. In random passwords it is placed at a random position, and the length must leave room for it and one character from each chosen set; in passphrases it is added at the end.
  • Count — 1 to 100 passwords at once, one per line, each drawn independently with the same options; Copy copies them all. The strength shown is that of each one.

How strength is measured

Strength is the number of guesses an attacker would need, expressed in bits: a password drawn at random from N possibilities has logâ‚‚ N bits. Each extra bit doubles the guesses. The label reads Weak below 40 bits, Fair below 60, Strong below 80, Very strong below 100 and Excellent above.

Passphrases draw from a list of 7,776 words, so each word adds about 12.9 bits — about as much as 2 random characters from every set. EFF recommends at least 6 words, which give 78 bits (Strong). Included text is fixed, so it adds no strength.

Strength by setting

Estimated strength of common settings
SettingBits
Random, 8 characters, all sets51
Random, 12 characters, all sets77
Random, 16 characters, all sets102
Random, 20 characters, all sets128
Random, 32 characters, all sets204
Memorable, 4 words52
Memorable, 6 words78
Memorable, 8 words103

The word list

Passphrases use the Electronic Frontier Foundation's long wordlist, unmodified: 7,776 words of three to nine letters, one for each roll of five dice. EFF chose familiar, concrete words, removed offensive words, hard spellings and homophones, and made sure no word is the start of another, so words joined with no separator still read apart. The list is published under the Creative Commons Attribution 4.0 licence.

Sources

Reviewed

See also