What Password Strength Actually Measures
Strength is a number, and the number is bits. Sixteen lowercase letters beat eight of every symbol on the…
Generates cryptographically strong random passwords and passphrases with full control over length and character sets.
The Password Generator generates cryptographically strong random passwords and passphrases with full control over length and character sets. It runs as plain JavaScript inside the page, which means there is no upload step, no queue and no size limit imposed by a server — the only limit is your own device.
| Randomness | crypto.getRandomValues, the browser's CSPRNG — not Math.random, which is predictable |
|---|---|
| Entropy shown | Calculated as length × log₂(alphabet size) and displayed with a crack-time estimate |
| Passphrase wordlist | 2,048 common English words, giving 11 bits of entropy per word |
| Network | No request is made when generating — check your Network tab |
Strength is a number, and the number is bits. Sixteen lowercase letters beat eight of every symbol on the…
Generates passphrases from the full EFF long wordlist, 12.9 bits a word, and shows the…
Generates cryptographically random API keys, session tokens and secrets in hex, Base64 or…
Estimates password entropy and crack time, and identifies the specific weaknesses in what you…
Calculates entropy in bits from length and character set, and shows how long a brute-force…
Generates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text, all at once.
Generates an MD5 hash of any text or string, with optional HMAC and uppercase output.
Generates SHA-256 hashes using the browser's Web Crypto API, with HMAC support.
Generates SHA-1 hashes, still required by some legacy systems and Git object addressing.
Generates SHA-512 hashes for checksums, signatures and archival fingerprints. Runs in your…
Calculates SHA-256, SHA-1 and MD5 checksums of a file locally, and compares against an…