Press Spin on the safe door for a new password: random characters (length, upper, lower, digits, symbols, skip look-alikes like O and 0), a memorable unaccented Vietnamese phrase (Meo-Trang-Bien-Xanh-47), or a PIN that isn't 1234 or 1111. Four bolts light up with the strength, plus how long a fast rig would take to guess it.
The strength test checks a password you already use: is it on the most-leaked list, does it hold a birthday, a run or repeated characters. Everything runs on your device with the browser's cryptographic generator; nothing is stored or sent.
How to use it
- Pick a type: random characters, memorable phrase or PIN.
- Set the length and characters, press Spin until you like it.
- Press Copy and paste it where you need it; type an old password in the test box to check it.
Why it's handy
- Random passwords up to 64 characters, no look-alikes
- Unaccented Vietnamese phrases that are easy to type
- PINs that avoid 1234, 1111, 1212
- Strength test: leaked passwords, birthdays, runs, crack time
Questions
- Are these passwords safe?
- They are made in your browser with its cryptographic generator, never stored and never sent anywhere.
- How long should a password be?
- At least 12 characters for everyday accounts, 16 or more for email and banking; for phrases, six words or more.
- How is the crack time worked out?
- From the password's bits of randomness against a fast rig trying ten billion guesses a second (if the password hash leaks); PINs use rate-limited online guessing.
- Is it safe to type my real password into the test box?
- Nothing is sent: the check runs in your browser on your device and is gone when you close the window.
More from the Toolbox