A good password, one click away.
Generate a password or a passphrase, or check the one you already use. Randomness comes from your browser, and nothing you type here leaves the page.
What actually makes a password strong
Three things decide it. Everything else is folklore.
- 01
Length beats cleverness
Every extra character multiplies the search. Twenty plain characters hold out far longer than eight clever ones.
- 02
Passwords live in a manager
You remember one long phrase. The manager keeps the rest and fills them in for you.
- 03
Generation happens at your end
The page draws randomness from the browser and holds the result in the tab. Closing it erases everything.
Strength measured in bits
The scale shows entropy in bits — the number of guesses an attacker has to make. Cracking time assumes a hundred billion guesses per second, which is what a rented rack of GPUs does today.
Fifty bits is a bad evening. Eighty is a serious project. A hundred and twenty is a wall.
Some systems reject certain symbols
Choose the form-safe set or enter the exact allowed symbols. The generator uses only the selected alphabet.
Why use a passphrase
Random words are easier to type and remember. Enough independently selected words suit the one secret you genuinely keep in your head.
How the breach check stays private
The password is hashed in the browser. Only the first five hash characters leave; the service returns the range and this tab finds the exact match.
Where the strength estimate comes from
From a model of common words and patterns; for a random phrase, from the actual dictionary size and independent word selections.
Passwords are the first door. The contour is the house.
Mail, files, knowledge and AI on hardware you control, with keys that stay yours.