Estimated time to crack by brute force: trillions of years
Assumes 10 billion guesses/second — an illustrative upper-bound estimate. The real time depends heavily on the attack method, so treat this as a rough comparison, not a guarantee.
Bulk generate
Choose your length
Drag the slider to set a password length between 8 and 64 characters — 16+ is recommended.
Pick character types
Toggle uppercase, lowercase, numbers, and symbols on or off.
Fine-tune if needed
Exclude ambiguous characters (l/I/1/O/0) or avoid sequential/repeating runs.
Copy or generate in bulk
Copy the password instantly, or generate 5/10/20 at once and download them as a .txt file.
Is this actually random, or just something that looks random?
It uses your browser's built-in secure randomness source — the same kind of cryptographically strong randomness used for encryption keys — rather than a simple pseudo-random number generator. It's designed for genuine unpredictability, not just an appearance of it.
How is the crack-time estimate calculated, and can I trust the exact number?
It's a real entropy calculation (bits = length × log2(character pool size)), converted to time using an assumed attack speed of 10 billion guesses per second. Treat the number as an illustrative comparison, not a guarantee — real-world crack time depends heavily on the attack method, target system, and hashing algorithm involved.
Are my generated passwords stored anywhere?
No. Everything happens locally in your browser. The "recent" history you see disappears the moment you refresh or close the page — nothing is ever sent to a server or saved permanently.
What does "avoid sequential/repeating characters" actually block?
It rejects passwords containing 3+ identical characters in a row (like "111") or 3+ consecutive characters in ascending/descending order (like "abc" or "321"), then generates a fresh one automatically.