Security
Random password generator
Strong passwords and passphrases, made in your browser.
| # | Password | Copy |
|---|---|---|
| 01 | ||
| 02 | ||
| 03 | ||
| 04 | ||
| 05 | ||
| 06 | ||
| 07 | ||
| 08 | ||
| 09 | ||
| 10 |
Notes
- Are the passwords sent anywhere?
- No. They are made in your browser with the Web Crypto random generator, the same source password managers use. Nothing is sent to our server or stored; only your settings are remembered on this device.
- How long should a password be?
- The strength column shows the entropy in bits: how many guesses an attacker would need, as a power of two. Aim for at least 75 bits: 12 random characters from all four sets, or six passphrase words. For a password manager's master password or an encryption key, go for 100 or more.
- Password or passphrase?
- A passphrase of random words is easier to remember and type, and six words (about 78 bits) are strong. Use eight or more for a master password. Random characters are shorter for the same strength, so they suit a password manager that types them for you.
- Why are some symbols missing?
- Quotes, the backtick, backslash and the vertical bar are left out because they often break in shells, config files, CSV and forms. The remaining symbols are accepted almost everywhere. “Avoid look-alikes” also drops I, l, 1, O, 0 and o.
Passphrase words: the EFF long word list (7,776 words) by the Electronic Frontier Foundation, eff.org/dice (CC BY 3.0 US)