Password Generator

How to Use the Password Generator

Use the slider to choose a password length, check the character types you want to include, then click "Generate." A password is generated automatically when the page loads.

• Length: Choose between 4 and 64 characters. A minimum of 12 characters is generally recommended.
• Uppercase, Lowercase, Digits, Symbols: Select which character types to use. At least one character from each selected type is guaranteed.
• Exclude ambiguous characters: Removes easily confused characters like "0" (zero), "O" (letter O), "1" (one), "l" (lowercase L), and "I" (uppercase i). Useful when writing a password down by hand.
• Strength meter: Displays password guessing difficulty in 4 levels based on entropy (bits of randomness).

Worked example: how length and character types change strength

Even with the same set of uppercase, lowercase, and digits, changing the length alone moves the strength dramatically. For example, at 8 characters (upper + lower + digits / 62 possible characters) you get something like Kp7aQ2mZ, with about 48 bits of entropy (Fair). Stretch it to 16 characters and you get Kp7aQ2mZ9rTbX4nL at roughly 95 bits (Very Strong). Add symbols too (70 characters) and the same 16-character password reaches about 98 bits. In other words, making a password longer pays off more than adding character types. Aim for 16 characters or more as a baseline.

Tips for Creating a Strong Password

• Use 16 or more characters — length has the greatest impact on strength
• Include all four character types: uppercase, lowercase, digits, and symbols
• Use a different password for each service and manage them with a password manager
• Never reuse the same password across accounts

Passphrase and PIN modes

Use the "Generate" selector at the top to switch to a passphrase (words) or a PIN (digits). A passphrase strings words from a 92-word list together with hyphens — often easier to remember than a short symbol-laden password. Its strength comes from the word count alone, and each word is worth only about 6.5 bits (the original Diceware uses a 7776-word list, about 12.9 bits per word). Pick ten words or more for memorability, or switch to the 16-character string mode when you want certainty.

• 4-word passphrase → maple-ocean-signal-quartz (about 26 bits). At about 6.5 bits per word, aim for ten words or more (about 65 bits) for ordinary use, and fourteen or more (about 90 bits) where an attacker could work offline.
• 6-digit PIN → 402917. For phone locks and access codes where you want to avoid guessable numbers like birthdays.

Frequently Asked Questions