Password Generator
Create a strong random password, passphrase or PIN, with its strength shown.
Passwords
Generate
Help improve UNQIRO
Allow anonymous usage statistics? UNQIRO would count only which tool was used, whether it finished and which links between the tools and the Format Lab were followed. Your files, text and results are never included, and this use is not counted.
How the passwords are made
- Secure randomness: Every character comes from your browser's cryptographic random generator (the Web Crypto API), with rejection sampling, so no character is more likely than another.
- Every kind you choose: A password always contains at least one character of each kind you switched on; a draw that misses one is thrown away and made again.
- Exact strength: The bits shown are worked out from the length and the characters allowed, minus the draws that miss a kind. They describe this generator, not a guess about your habits.
- Look-alikes: Leaving out I, l, 1, O and 0 helps when a password is read aloud or typed from paper. It costs a little strength, which the bits show.
Frequently asked questions
How long should a password be?
For an account protected by a password manager, 16 random characters or more. Each extra character multiplies the number of possible passwords by the size of the character set.
Are the settings remembered?
Length and the kinds of characters are, in this browser only. The passwords themselves are never stored; a new one is made each time.
Why does 80 bits count as very strong?
Every bit doubles the number of possible passwords. At 80 bits there are about 10^24 of them, far more than anyone can try against a hash, even at billions of guesses a second.