Generator Settings
Generated Results
Formula used
For random passwords, this tool estimates entropy with length × log₂(character pool size). A larger pool and longer password generally increase possible combinations.
Passphrase entropy is estimated from the number of words and available dictionary choices. The displayed score is an educational estimate, not a cracking-time guarantee.
How to use this calculator
- Choose Random Password, Readable Password, or Passphrase mode.
- Select length, quantity, character types, and advanced restrictions.
- Use a preset when you want a quick starting configuration.
- Press Generate Passwords, then review each strength estimate.
- Copy a result or download the generated list when needed.
Example Settings
| Use case | Suggested setup | Why |
|---|---|---|
| General account | 20 characters with all types | Strong default for unique stored credentials. |
| Wi-Fi password | 24 characters without ambiguous symbols | Easier to read while remaining long. |
| Memorable secret | Five-word passphrase plus numbers | Balances memorability and search space. |
| Numeric PIN | 6 to 10 digits | Useful only where a numeric secret is required. |
Password Security Guidance
Strong passwords should be unique for every important account. Reusing one password can turn a single breach into several compromised accounts. Longer random passwords usually provide more protection than short complex-looking passwords. A password manager can create and store unique credentials safely.
Randomness matters because predictable substitutions are easier to guess. Patterns such as names, dates, keyboard sequences, and repeated words reduce effective security. This generator uses cryptographic randomness through random_int(). The generated values are created only for the current request.
Passphrases can be useful when a password must be typed manually. Several unrelated words are generally easier to remember than a long random string. Adding more words normally improves strength more effectively than making one word visually complicated. Never use a famous quotation or a phrase connected to personal information.
Strength meters are only estimates. They cannot know whether a password has appeared in a breach or follows a personal pattern. Treat the meter as general guidance instead of a guarantee. For sensitive accounts, combine unique passwords with multi-factor authentication whenever the service supports it.
Downloading passwords can be convenient for controlled workflows. However, plain TXT and CSV files are not encrypted. Protect exported files and remove them when they are no longer needed. Printing can also expose credentials to other people or printer history.
Settings may be remembered in local browser storage when that option is enabled. Only configuration choices are stored. Generated passwords are intentionally excluded from browser storage. Clearing browser data removes remembered settings.