Last updated
Generating a Strong Random Password
Default settings produce a 16-character password with all character types:
Generated: K#9mP2@vR7nB4wL8j
Length: 16 characters
Character types: uppercase, lowercase, digits, special
Entropy: 104 bits
Crack time (offline, fast hash): ~1.4 × 10^14 years
At 104 bits of entropy, this password is effectively uncrackable by brute force. Even with a trillion guesses per second, it would take longer than the age of the universe.
Password Length vs Security
How length affects the number of possible passwords (all character types, ~90 chars):
Length Possible combinations Entropy Crack time
8 6.6 × 10^15 52 bits ~7 hours (fast hash)
10 5.4 × 10^19 66 bits ~171 years
12 4.7 × 10^23 79 bits ~1.5 million years
16 3.5 × 10^31 104 bits ~1.1 × 10^21 years
20 2.8 × 10^39 130 bits Effectively infinite
Each additional character multiplies the possibilities by ~90. Going from 12 to 16 characters makes the password 10 million times harder to crack.
Passphrase Generation
Four random words are more memorable and often stronger than complex passwords:
Generated passphrases:
correct-horse-battery-staple
purple-mountain-river-cloud
silent-forest-copper-bridge
dancing-penguin-silver-moon
Entropy: ~52 bits per word (from 2000-word list)
4 words: ~52 bits total
5 words: ~65 bits total
6 words: ~78 bits total
A 6-word passphrase is easier to remember than K#9mP2@vR7nB4wL8j and provides comparable security. Use passphrases for accounts you type manually.
Custom Character Set Options
Configuring the generator for specific requirements:
// Exclude ambiguous characters (0, O, 1, l, I)
Generated: K#9mP2@vR7nB4wL8j → K#9mP2@vR7nB4wL8j
(0 and O excluded, 1 and l excluded)
// Digits only (for PIN codes)
Length: 6, digits only
Generated: 847392
// Alphanumeric only (no special chars — for systems that don't allow them)
Length: 20, uppercase + lowercase + digits
Generated: K9mP2vR7nB4wL8jX3qY5
// Lowercase only (for case-insensitive systems)
Length: 24, lowercase + digits
Generated: k9mp2vr7nb4wl8jx3qy5z6ab
Generating Multiple Passwords to Choose From
Generate 10 passwords and pick the most memorable:
1. K#9mP2@vR7nB4wL8j
2. Xq3$nB7@mK5vP9wL2
3. Rj8!vN4@kM2xQ6wP5
4. Wy5#bK9@nR3mX7vQ4
5. Tz2@mP6#vK8nB4wR9
6. Lp7!xQ3@kN5mR8vB2
7. Hm4#vR9@bK2nP6wX5
8. Gn8@kM3#xR7vB5wQ2
9. Fq5!nP8@mK4vR2wB9
10. Dw3#bK7@nM5xQ9vR4
All 10 are equally strong. Choose the one that seems most memorable to you. Even a slight preference helps you remember it without writing it down.
API Key Format Password
Generate passwords in common API key formats:
// 32-character hex (like many API keys)
Length: 32, hex characters (0-9, a-f)
Generated: a3f7b2c1d4e5f6a7b8c9d0e1f2a3b4c5
// Prefixed API key format
sk_live_K9mP2vR7nB4wL8jX3qY5z6abKm9P
// UUID-style (but random, not UUID)
Generated: a3f7b2c1-d4e5-f6a7-b8c9-d0e1f2a3b4c5
Password for Different Use Cases
Recommended settings for different account types:
Email account (high value):
Length: 20+, all character types
Generated: K#9mP2@vR7nB4wL8jX3qY
Banking/financial:
Length: 16+, all character types
Generated: Xq3$nB7@mK5vP9wL2
Social media:
Length: 16, all character types
Generated: Rj8!vN4@kM2xQ6wP5
Work systems (typed frequently):
Passphrase: 5-6 words
Generated: purple-mountain-river-cloud-seven
Wi-Fi password (shared with guests):
Length: 12, alphanumeric only (easy to type on phone)
Generated: K9mP2vR7nB4w
Browser-Based Security
The generator runs entirely in your browser:
// The generator uses the Web Crypto API
const array = new Uint32Array(1);
crypto.getRandomValues(array);
// This is cryptographically secure — same API used for TLS
// No server requests — verify in browser DevTools:
// Network tab → no requests when generating passwords
// All computation happens locally in JavaScript
Generated passwords never leave your browser. No server logs, no network requests, no storage. Safe to use for any account including banking and email.
Password Manager Integration
Best practice workflow with a password manager:
- Generate a 20+ character random password
- Copy it directly into your password manager (never type it)
- Let the password manager fill it in automatically
- Use a unique password for every account
- Use a strong passphrase for the password manager master password (you need to remember this one)
With a password manager, you only need to remember one strong passphrase. Every other account gets a unique, randomly generated password that you never need to type or remember.