Passphrase generator
Passphrase is selected. Set the word count and separator, then copy the result.
- Runs on your device
- No sign-up
- Works offline after a visit
Weak under 50 bits, fair 50 to 69, strong 70 to 99, very strong 100 or more. The bar runs to 128 bits.
Time to try every combination at 10 billion guesses a second (an assumption for an offline attack):
This page opens the password generator in Passphrase mode. Each word is picked with secure randomness. The result comes with an estimate of its strength in bits, on a bar that runs to 128 bits.
A passphrase is easier to type and remember than random characters, so it suits a secret you type often, such as a device login. For a password you only paste from a manager, the password generator makes random characters.
How it works
- Choose random characters or a passphrase.
- Set the length or word count, then the character sets or separator.
- Copy one of the five results into your password manager.
Questions
How many words should I use?
Five words from a 1,024-word list give 50 bits, which the bar calls fair. Each extra word adds 10 bits, so six words give 60 bits and seven give 70, which is strong.
What does the time to guess mean?
It is the time to try every combination at 10 billion guesses a second. That rate is an assumption for an offline attack, where guesses are tested on the attacker's own machines, not on the website.
Is a generated password safe to use?
It is as strong as its length and randomness. These are made with crypto.getRandomValues, the browser’s cryptographic random source. They are never sent or stored, and closing the tab discards them.
What do the strength words mean?
They come from the entropy estimate, the bits of randomness in the password: under 50 is weak, 50 to 69 fair, 70 to 99 strong, and 100 or more very strong. The time to guess assumes 10 billion guesses a second, a rate assumed for an offline attack.
Random characters or a passphrase?
Random characters are the hardest to guess but the hardest to type. A five-word passphrase from a 1,024-word list gives 50 bits, and each extra word adds 10. Use a passphrase when you must type it often, such as a device login.
Should I reuse a generated password?
No. Use a different password for each account and keep them in a password manager, so you only need to remember one master password.
Reviews
No reviews yet. Be the first.