Password Generator
Deliver enterprise-strong passwords with granular rules and instant strength feedback.
Your password
Strength🪦 Very weak
Entropy 0 bits · 0 charsRecipe
Generated locally with your browser's secure RNG — never sent anywhere.
Refinements
Generate in bulk
Same recipe, many passwords at once.
Just for fun
How long to crack?
🪦 Crackable before your coffee cools.
On a rented GPU farm: instantly · about < $0.01 of compute.
- Online, rate-limited (100/hr)
- 18 seconds
- Online, no throttle (10k/s)
- instantly
- Offline, slow hash · bcrypt (10k/s)
- instantly
- Offline, fast hash · GPU farm (100B/s)
- instantly
- Massive array · nation-state (100T/s)
- instantly
Ballpark only — assumes random guessing of the full keyspace. Reused or dictionary passwords fall far faster.
Password Generator FAQ
- How random are the generated passwords?
- Every character is chosen with crypto.getRandomValues using rejection sampling, which avoids the modulo bias of naive random generators.
- What is the entropy estimate?
- It is the number of bits of randomness in the password, based on its length and the size of the character set or wordlist. Higher is harder to brute-force.
- Should I use a password or a passphrase?
- Passphrases made of random words are easier to type and remember at similar strength; use them for master passwords and random character strings for a password manager.
- Are generated passwords stored?
- No. They exist only in the page while it is open and are never sent or saved anywhere.