How to make a strong password
- A new password appears right away. Press Generate new for another.
- Set the length and pick which characters to use. Some sites do not allow symbols; turn them off if needed.
- Copy the password into your password manager or the sign-up form.
Each password always includes at least one character from every type you turned on. "Avoid look-alikes" leaves out characters that are easy to confuse when reading or typing, such as l and 1.
Questions
Are the passwords sent or saved anywhere?
No. They are created in your browser and disappear when you close the page. Nobody, including us, ever sees them.
How random are they?
They come from your browser’s cryptographic random generator (Web Crypto), the same source used for encryption keys, and every character is picked without bias.
How long should a password be?
Use at least 16 characters for important accounts. Length adds more strength than symbols do, so a long password with letters and numbers beats a short one full of symbols.
How is the cracking time estimated?
It assumes an attacker who stole a password database can try 10 billion guesses per second, and that they would find yours after trying half of all possible passwords of this kind.
How do I remember these passwords?
Use a password manager. It remembers a different strong password for every site, so you only need to remember one.
Credits
Built by OneTooling using standard browser features. No third-party code runs on your data.