Back to the blog

Developer

What makes a password strong.

A strong password is long and random: how the page makes one from the browser's own randomness, and what its strength in bits means.

By 3 min read

The Passwords panel: a 16-character random password, very strong at 104 bits, beside a six-word passphrase

Strength comes from how many passwords could have been made, not from how clever one looks.

Random, every character equally likely.

The page draws each character from the browser's cryptographic generator, by rejection so no character is favoured. With at least one of each kind asked for, a password missing one is drawn again, so every allowed password stays equally likely.

Strength in bits.

The page counts how many passwords the same settings could make and gives log₂ of it: each bit doubles the guesses needed. 16 characters of every kind give about 104 bits.

Keeping it.

Nothing is sent or kept: copy the password into a password manager, and use a different one for every account.

Further reading

Topics: password generator · random password · strong password · password entropy · secure password

A little less theory. A little more doing.

Try it on your own terms, with a free browser tool.

Try the tool