What Makes a Strong Password?
A strong password should be: at least 12-16 characters long, use a mix of uppercase, lowercase, numbers and symbols, be unique for each account, and contain no dictionary words or personal information.
Time to Crack Estimates
8 chars, lower only
Cracked instantly
Cracked instantly
10 chars, mixed case
~1 hour
~1 hour
12 chars, all types
~3 years
~3 years
16 chars, all types
Centuries
Centuries
Password Security Best Practices
- Use a password manager (Bitwarden, 1Password, Dashlane)
- Enable two-factor authentication (2FA) on all important accounts
- Never reuse passwords across different sites
- Never share passwords via email, SMS or chat
- Change passwords immediately after any breach or suspected compromise
Are passwords generated here safe to use?
Yes. All password generation happens entirely in your browser using the Web Crypto API (window.crypto.getRandomValues). Passwords are never sent to any server. They exist only in your browser session and are deleted when you close the page.
What is a passphrase and why is it better?
A passphrase is a sequence of random words (e.g., "correct-horse-battery-staple"). They are longer than typical passwords, making them more secure against brute force attacks, while being easier to remember than random character strings.