Generate a password you can actually justify
Cryptographically random, generated locally, with the real entropy shown in bits rather than a vague “strong” badge. Nothing is sent anywhere or stored.
Options
What the numbers mean
How the crack-time figure is calculated
Entropy is log₂(alphabetlength) for random characters, or log₂(wordlistwords) for a passphrase — computed from the options you actually chose, not estimated from the output.
The time assumes an offline attack at 100 billion guesses per second, roughly a well-funded GPU rig against a fast hash. Against a properly slow hash like bcrypt or Argon2 it would take vastly longer; against an unsalted MD5 dump, less. It is a yardstick, not a promise.
Entropy only holds if the generator is genuinely random. This usescrypto.getRandomValues(), never Math.random(), and rejects modulo bias when mapping bytes to characters — a subtle flaw that quietly skews the distribution in many generators.
Check something else
Found something you’d rather not fix yourself?
Configuring DNS, TLS and email authentication properly — without breaking live traffic — is part of our cybersecurity and managed services work.