1Click Password Generation
Pick a platform. Get a password that fits its rules, graded from Weak to Very strong.
Very strong~100 bitsoffline crack time ≈ more than a trillion years
Rules for Any websiteOur recommendation
No platform-specific rules exist for this, so this is what we recommend.
- A balanced default that the vast majority of sites accept.
- If a form rejects a symbol, turn symbols off and add length instead.
How strength is graded
Strength is the entropy of the way the password was generated: how many equally likely passwords could have come out of the same settings. More bits means exponentially more guesses.
| Tier | Entropy |
|---|---|
| Very weak | 0–27 bits |
| Weak | 28–35 bits |
| Fair | 36–59 bits |
| Strong | 60–79 bits |
| Very strong | 80+ bits |
The crack-time figure assumes a fast offline attack (10 billion guesses per second) on a leaked password database. Online logins are rate-limited, so real attacks against a good password are far slower. Reusing a password across sites is what actually gets people breached, so use a different one everywhere.
Passwords are generated in your browser with the Web Crypto API and are never sent or stored. Only your Auto-copy preference is remembered on this device. Platform rules change without notice; if a site rejects a password, follow the message on its form.