Generate secure passwords with custom rules, entropy calculation, and strength metrics. Part of the DevTools Surf developer suite. Browse more tools in the Generators collection.
Use Cases
Generate high-entropy passwords with fine-grained character set control for specific application requirements.
Create passphrases for accounts requiring memorization (device login, master passwords).
Generate bulk passwords for user account seeding with configurable complexity rules.
Produce a password that meets specific complexity rules (e.g., at least 2 uppercase, 2 digits, 1 symbol).
Tips
Use the entropy display to verify your password configuration — aim for at least 80 bits of entropy for sensitive accounts, 100+ bits for critical ones.
Exclude characters that appear ambiguous in your display font (0/O, 1/l/I) when generating passwords that users must retype from a printed sheet.
Generate passphrases (random words) instead of random characters for accounts requiring memorization — 4-6 random words provide 50-80 bits of entropy while being far easier to remember.
Fun Facts
Entropy in password generation is measured in bits: each character from a set of N choices adds log2(N) bits. A 20-character password from a 95-character set has log2(95^20) ≈ 131 bits — more than enough for all foreseeable compute budgets.
GPU-based password cracking can test 100 billion MD5 hashes per second on a single high-end card. A 12-character random password from the full ASCII printable set (95 chars) would take ~1,500 years to crack at this rate.
The diceware method (1995) by Arnold Reinhold uses 5 six-sided dice to select words from a numbered list — producing passwords with exactly log2(7776^N) bits of entropy, where 7776 = 6^5 and N is the number of words chosen.
FAQ
What's the difference between this and the standard password generator?
This advanced generator adds entropy display, custom character exclusion rules, passphrase mode (word-based), pronounceable password mode, and compliance presets for specific standards (NIST SP 800-63, PCI DSS).
Does it generate passphrases?
Yes — passphrase mode selects random words from an EFF long wordlist (7,776 words). Each word adds 12.9 bits of entropy; 4 words = 51.6 bits, 6 words = 77.4 bits.
What's a pronounceable password?
A character password generated to follow consonant-vowel-consonant patterns (e.g., 'xopit-mabel'). Slightly lower entropy than fully random, but significantly more memorable and writable without transcription errors.
