Password Generator

Generate secure random passwords with custom length and character sets. Shows entropy and estimated crack time.

16 characters
816 (recommended)64
StrengthVery Strong

88

Character pool

103 bits

Entropy

409.8 trillion years

To crack (1B/sec)

How to Use the Password Generator

  1. Set your length. A 16-character password is the minimum recommendation for important accounts. Use 20+ characters for financial accounts, email, and password managers. The longer the password, the exponentially harder it is to crack.
  2. Select character types. Using all four types (uppercase, lowercase, numbers, symbols) maximizes the character pool size, which directly increases entropy. Each added character type multiplies the number of possible passwords.
  3. Exclude ambiguous characters (optional). If you need to type the password manually, excluding characters like 0/O/l/1/I prevents transcription errors. This slightly reduces the character pool but avoids confusion.
  4. Copy the password. Click Copy and paste it directly into your password manager. Never type passwords you generated digitally into a public device.
  5. Regenerate freely. If you want a different combination of characters, click Refresh. Each generation uses cryptographically secure random numbers.
Store generated passwords in a password manager (Bitwarden, 1Password, or similar), not in a text file, spreadsheet, or browser notes. A password manager lets you use long unique passwords for every site without memorizing them.

Password Entropy and Strength Explained

Password strength is measured in bits of entropy. Entropy tells you how many guesses an attacker would need on average to crack the password:

Entropy (bits) = log2(charset size) × password length

Possible combinations = charset size ^ password length

Character pool sizes:

Character typesPool size
Lowercase only26
Lowercase + uppercase52
Lowercase + uppercase + numbers62
All four types~95

Example: 16-character password with all four types (pool size 95):

Entropy = log2(95) × 16 = 6.57 × 16 = 105 bits
Combinations = 95^16 ≈ 4.4 × 10^31

At 1 billion guesses/second:
  4.4×10^31 / 10^9 = 4.4×10^22 seconds
  = 1.4 trillion years

This is why length matters much more than complexity. A 20-character lowercase-only password (94 bits) is stronger than a 10-character password using all character types (66 bits).

Frequently Asked Questions

At minimum, 12 characters for low-stakes accounts and 16+ characters for important accounts. For your email, banking, and password manager, use 20+ characters. At 16 characters with mixed types, a modern computer would need trillions of years to crack the password by brute force. Length is the single most important factor in password strength.

Related Calculators