Password generator

Set the length and the character set and the password appears immediately. Sixteen characters mixing lower case, upper case, digits and punctuation covers almost every service. Length is the parameter that matters most: it raises strength faster than exotic symbols do, and it is the easiest one to increase.

No. It is produced in your browser by a cryptographic random number generator and never transmitted: the server knows neither the password nor that one was created. Open the page, disconnect from the network and the generator keeps working exactly as before — that is the whole proof.

Twelve characters for ordinary accounts, sixteen for email, banking and a password manager. Every extra character multiplies the search space by the alphabet size, which is why a long simple password beats a short one with letters swapped for lookalike digits — cracking tools try those substitutions first.

A measure of unpredictability in bits: the length multiplied by the base-two logarithm of the alphabet size. Sixteen characters from an alphabet of ninety-four gives about 105 bits. Below 60 bits is weak, 80 and above covers nearly everything. The indicator uses the raw formula and ignores dictionary patterns.

It is better for the one password you must actually memorise — the master password of your manager. Strength comes from the number of words: the word list here holds about five hundred, so use five or six words rather than four. Classic diceware uses 7776 words, where four suffice.

No. The password exists only on the open page: nothing is logged, nothing is saved in the browser, and it disappears with the tab. No history of issued values is kept, so a closed password cannot be recovered — copy it into your password manager before you leave the page.