Password Generator

> return_hub · module_active

PASSWORD · GEN

> local_only · crypto.getRandomValues · nothing leaves your browser

Generator

Password

Edit to test your own password or extend a generated one — strength updates as you type.

Strength

Very weak0 bits

Time to crack (offline fast hash): Hacker with RTX 5090instantly
World's fastest supercomputerinstantly
State actor (US/China-scale cracking cluster)instantly
State actor in 50 yearsinstantly
Alphabet size: 0 chars
Length: 0 chars

· Entropy assumes uniformly random selection (or word-list picks for passphrases). Reusing a password anywhere voids that math.
· Crack times assume offline fast-hash guessing from a single RTX 5090 up through hypothetical future state-scale hardware. Online attacks against a real service are far slower.
· Length beats complexity: a long passphrase usually wins over a short symbol-soup password.

> status_idle

About this tool

Generate random passwords, word passphrases, or pronounceable memorable passwords in your browser. See a strength meter, entropy in bits, and offline crack-time estimates. Uses crypto.getRandomValues; nothing is uploaded.

Frequently asked questions

Are passwords generated on your server?: No. Generation runs locally in your browser using crypto.getRandomValues for cryptographically strong randomness. Nothing is uploaded or logged by Roy's Tools.
What is entropy in bits?: Entropy is how unpredictable a password is, measured in bits. Each bit doubles the search space, so 80 bits means roughly 2^80 possible passwords. 80+ bits is a comfortable target for most personal accounts.
How is time to crack calculated?: We show four offline fast-hash estimates—from a single RTX 5090 through hypothetical future state-scale hardware—and report the average time to search half the keyspace. Online attacks against a real service are typically far slower.
Should I use a random password or a passphrase?: Both can be equally strong. Passphrases are easier to remember and type; random character passwords are shorter for the same entropy. Pick whichever you'll actually use without reusing.
Does length really beat complexity?: Usually yes. Adding two more random characters from a 70-symbol alphabet adds about 12 bits of entropy, which beats most complexity-rule tweaks. Aim for length first, complexity second.

> return_hub · module_loader · boot

MODULE · LOADING

Loading module…

Frequently asked questions

Are passwords generated on your server?

No. Generation runs locally in your browser using crypto.getRandomValues for cryptographically strong randomness. Nothing is uploaded or logged by Roy's Tools.

What is entropy in bits?

Entropy is how unpredictable a password is, measured in bits. Each bit doubles the search space, so 80 bits means roughly 2^80 possible passwords. 80+ bits is a comfortable target for most personal accounts.

How is time to crack calculated?

We show four offline fast-hash estimates—from a single RTX 5090 through hypothetical future state-scale hardware—and report the average time to search half the keyspace. Online attacks against a real service are typically far slower.

Should I use a random password or a passphrase?

Both can be equally strong. Passphrases are easier to remember and type; random character passwords are shorter for the same entropy. Pick whichever you'll actually use without reusing.

Does length really beat complexity?

Usually yes. Adding two more random characters from a 70-symbol alphabet adds about 12 bits of entropy, which beats most complexity-rule tweaks. Aim for length first, complexity second.

Password Generator

About this tool

Related tools

Frequently asked questions

About this tool

Related tools

Frequently asked questions