Password Generator
Generate strong random passwords, memorable passphrases and PINs — with live entropy, crack-time and a strength checker. Cryptographically secure and 100% local: nothing you generate or test ever leaves your browser.
Options
This password
*Average time for an offline attacker at 1 trillion guesses/second.
Check your own password
Test any password to see its real strength — we penalize common words, sequences and repeats, not just length.
Password security guide
Six habits that matter far more than any single “strong” password.
Every extra character multiplies the search space far more than swapping a letter for a symbol. A long passphrase beats a short scrambled password.
One breach then unlocks every account that shares that password. Use a unique password per site — a password manager makes this painless.
Generate and store long random passwords you never have to remember. You only memorize one strong master passphrase.
Even a perfect password can leak. A second factor (app code or hardware key) stops an attacker who has your password.
Four random words give ~50 bits of entropy and are easy to type. Six words is genuinely strong and still human-friendly.
Dates, names, keyboard walks (qwerty) and “P@ssw0rd”-style substitutions are the first thing crackers try. Randomness is what protects you.
How the strength math works
Everything is transparent — no black-box “strength bar”.
| Entropy (bits) | length × log₂(character-set size). For passphrases: words × log₂(wordlist size). More bits = exponentially harder. |
| Combinations | 2^entropy — the number of possible passwords an attacker must search. |
| Crack time | Average time at 1 trillion guesses/second (a well-funded offline attacker on fast hashes). We search half the space on average. |
| Strength | weak < 40 bits · fair < 60 · good < 80 · strong < 100 · excellent ≥ 100. The checker also subtracts entropy for common words, repeats and sequences. |
| Randomness | Every value comes from your browser’s cryptographically-secure generator (crypto.getRandomValues) with unbiased rejection sampling — never Math.random. |
More free IT tools
Fast, private, browser-only utilities from Anavem — no sign-up, no tracking.