About this tool
How does it work?
Passwords are created with your browser’s Web Crypto random number generator (CSPRNG) and are never sent to a server. Characters are picked with rejection sampling so there is no modulo bias, and if the rules you choose (such as at least one character of each type) cannot be met, you get an error instead of quietly relaxed rules.
What does the entropy figure mean?
The number of bits shown is log₂ of how many different outputs the selected settings can produce. For a randomly generated password, that number is what determines how hard it is to guess. To rate a password you chose yourself, use the password strength checker.
Which type should I choose?
- Random password: for accounts stored in a password manager and for application secrets.
- Passphrase: for master passwords you need to remember or type by hand. Five to six words are recommended.
- PIN: for systems that accept only digits and limit the number of attempts.