Free & Secure
Free Password Generator
& Strength Checker
Generate strong, secure passwords and passphrases instantly.
Check strength, estimate crack time, copy, or scan the QR code.
Password Generator
STRENGTH
0 bits
—
16
8
64
Uppercase A–Z
Lowercase a–z
Numbers 0–9
Symbols !@#$
Time to Crack
Estimates assume brute-force attacks at realistic speeds. Online attacks are rate-limited (~100/s). Offline attacks use modern GPU clusters. bcrypt/Argon2 are slow hashes used by secure apps.
QR Code
Scan to transfer password
History
Last 5 generated passwords
Nothing here yet
Security Tips
Use at least 16 characters for important accounts like banking and email.
Never reuse passwords across different services. One breach can compromise all your accounts.
Use a password manager like Bitwarden or 1Password to store credentials safely.
Enable two-factor authentication (2FA) whenever available — it blocks 99% of attacks.
Passphrases like wolf-thunder-castle-42 are easy to remember and extremely secure.
Frequently Asked Questions
How long should my password be?
For important accounts like banking and email, use at least 16 characters. A 20+ character password with mixed character types is practically uncrackable even with modern GPU clusters. This generator supports up to 64 characters.
How is the crack time calculated?
We calculate entropy (randomness in bits) based on your password's length and character pool size, then estimate how long a brute-force attack would take across 4 realistic scenarios: online throttled attacks (100 guesses/sec), online fast attacks (1,000/sec), offline attacks against bcrypt/Argon2 hashes (50,000/sec), and offline attacks against weak MD5/SHA1 hashes using a modern 8x RTX 4090 GPU cluster (100 billion/sec).
Is a passphrase more secure than a random password?
A passphrase like "wolf-thunder-castle-42" is both secure and memorable. With 4+ random words from a wordlist, the entropy is high enough to resist brute-force attacks. The key is that the words must be randomly selected, not chosen by a human. This generator uses cryptographically secure randomness (Web Crypto API).
Is this password generator safe to use?
Yes. All passwords are generated entirely in your browser using the Web Crypto API (crypto.getRandomValues). No passwords are ever sent to a server, stored in a database, or logged anywhere. The tool works fully offline after the page loads.
What makes a password strong?
A strong password has high entropy — meaning it's long, uses diverse character types (uppercase, lowercase, numbers, symbols), and is randomly generated rather than human-chosen. Avoid dictionary words, personal info, and common patterns. Our strength meter evaluates all these factors in real time.
Can hackers really crack passwords in seconds?
Short or simple passwords — yes. A 6-character lowercase password has only ~300 million combinations, which a GPU can exhaust in under a second. But a 16-character password with mixed types has over 1030 combinations, which would take billions of years. Length and character variety matter enormously.
What is password entropy?
Entropy measures password randomness in bits. It's calculated as length × log2(pool size), where pool size is the number of possible characters. Higher entropy = harder to crack. Under 36 bits is weak, 60–80 is strong, and 100+ bits is practically unbreakable.