/en/tool/password-generator/ works Generated in the browser, breach checks — on demand
Three tools in one panel. A password is a random string of the required length, with minimum numbers and symbols as required by the registration form. A passphrase is several random words from a dictionary: you can dictate it over the phone and remember it. And there’s password analysis: not just “how many bits,” but which exact pattern was detected and whether it appeared in a breach.
For a password stored in a manager, use 16 characters or more with all character sets enabled. You will not have to type it by hand, so there is no reason to save on length.
If the form rejects the composition, set the minimums: "at least 1 digit," "at least 1 symbol," and "at least 1 uppercase letter." The generator will build the password so the requirement is met on the first try.
If a site disallows some characters, enter them under "Exclude characters." If it allows only its own list, enter that list under "Custom character set," and everything else will stop applying.
For a password you will have to dictate or enter with a TV remote, use the "Passphrase" tab. Six words from a Russian dictionary give 60 bits, and seven give 70; six words from the English EFF list give 77.5.
Copy the required string with the button next to it. One minute after copying, the page will erase the clipboard — the countdown is shown on the button itself.
To transfer a password to your phone, click "QR" in its row and point the camera at it. You do not need to type anything by hand.
Check a password you came up with yourself on the third tab: the analysis will show which exact pattern matched, and the leak-check button will show whether it has appeared in someone else's leaked data.
Entropy = Length × log₂(Alphabet size); for a phrase, it is Words × log₂(Dictionary size)
The formula is valid only for genuinely random selection — that is, for what this page generates. For a password invented by a person, it overestimates the result several times over: the search does not cover all combinations, but dictionaries, names, dates, and keyboard sequences. That is why the "Check your own" tab uses pattern analysis instead of this formula.
The input data is the same as the default field values: you can calculate it mentally and confirm that the tool is telling the truth.
Using the full brute-force formula: 13 × log₂(95) ≈ 13 × 6.57 ≈ 85 bits. That is "strong" by any scale, and almost any generator will say the same.
Pattern analysis sees something else. Password is the second entry in the common-password list; the uppercase first letter doubles the number of possibilities, which costs exactly one bit. Total: 4 attempts for the entire chunk.
2024 is a year. There are only 136 years from 1900 to 2035, which is less than eight bits.
The exclamation mark remains a brute-force character: one character, 95 possibilities.
Multiply them: 4 × 136 × 95 ≈ 52 thousand. There are three chunks, and their order is unknown to the cracker in advance — that adds a factor of 3! = 6. The result is 310,080 attempts, or 18.2 bits instead of 85.
Eighty-five bits by the formula and 18 by the analysis — a difference of 20 orders of magnitude. A login form with an attempt limit will last 52 minutes; a GPU will not last even a second. That exact difference is why the third tab was added to the page.
It uses crypto.getRandomValues — the browser's cryptographic random generator. Regular Math.random is not suitable for passwords: it is fast but predictable, and its state can be reconstructed from several values it has returned. The generator also discards some random bytes so that the remainder divides evenly by the alphabet size; otherwise, the first characters in the alphabet would appear slightly more often than the rest. Phrase words are selected the same way, rather than "at random from the middle of the list."
Yes, if the words are selected randomly rather than invented. Six words from the EFF list give 7776 to the sixth power, or 77.5 bits — more than a random 12-character password. The difference is that you can dictate the phrase over the phone and enter it with a TV remote. But a phrase you came up with yourself ("mycatlovesfish") provides no real strength — it can be cracked with the same dictionaries used for ordinary passwords.
The first five characters of the SHA-1 hash of your password, and only after you click the button. The hash is calculated on your device. The response contains several hundred hash suffixes that begin with those five characters, and the match is found on the page. The service cannot tell which exact password you checked from five characters: about 800 different hashes share one prefix. This is the standard k-anonymity scheme, also used by the password manager in Chrome. The request goes to our server, which then queries Have I Been Pwned: the third-party service sees our server's address, not yours. The password, full hash, and prefix are never stored anywhere — the server only passes the response back to the tab.
Because one line is misleading. A login form with an attempt limit checks 100 passwords per second, a slow bcrypt hash on your own hardware checks tens of thousands, fast SHA-256 on a GPU checks 10 billion, and a cluster checks 100 trillion. That is a difference of ten orders of magnitude for the same password. If the database on the other side is poorly protected, only length can save you.
Words from lists of common passwords, names (including Russian names written in Latin characters — sergey, natasha), words from Russian and English dictionaries, words typed with the wrong keyboard layout (gfhjkm means "password"), dates and years, repeated characters, sequences such as abcd and 1234, keyboard sequences such as qwerty and йцукен, and letter substitutions with numbers and symbols (@ instead of a, 0 instead of o). The password is split into chunks. Each chunk gets its own cracking cost, and the cheapest way to split the entire password is used. This is a simplified explanation of the zxcvbn library, which powers the estimates in Bitwarden and other password managers.
No. They exist only in the tab's memory: reload the page and the list is gone. The address bar keeps the settings — length, character sets, number of words — but no password is stored there or can be. The page automatically erases a copied password from the clipboard after one minute, so it cannot end up in another field during the next paste.
Length. Every added character multiplies the number of possibilities by the size of the entire alphabet, while expanding the alphabet adds only fractions of a bit to each position. A password with 20 lowercase letters is stronger than one with 10 characters from all character sets. So removing similar characters or excluding symbols costs almost nothing: one extra character restores the lost fraction of a bit.