Making your password…
How strong is it, exactly?
Strength is measured in bits. Each extra bit doubles the number of guesses an attacker would need.
How to use it
- Choose Easy to remember for a passphrase of random words, or Random characters.
- Pick how many words, or how long the password should be.
- Press Copy password.
- Paste it into the site you are signing up to, and save it in a password manager.
Questions people ask
How long should a password be?
Aim for at least 12 characters for a random password, and 16 or more is better. This tool suggests 20. For a passphrase made of random words, use at least four words. Length matters more than clever symbols, because each extra character or word multiplies the guesses an attacker needs.
Is a passphrase as strong as random characters?
It can be. Every word here is picked at random from a list of 7,776, so each word adds about 12.9 bits of strength. Four words give about 51 bits and six give about 78 bits. A passphrase is much easier to type and remember than a string of symbols.
Is it safe to make a password on a website?
It is safe here because the password is made inside your browser, using its built-in secure random number generator. Nothing is sent to a server, saved or logged. Even so, copy it straight into your password manager, and do not use a password you have shown to anyone else.
Can I use the same password on more than one site?
No. If one site is hacked, anyone holding that password can try it everywhere else you use it. Use a different password for each account and keep them in a password manager, so you only need to remember one strong password for the manager itself.