PocketPlay
中文
Password Generator
Generate strong random passwords, pronounceable passwords and Diceware passphrases, with an entropy and crack-time estimate.
Words are drawn from the 1,296-word EFF short list (CC BY 3.0 US) — easy to type, easy to remember, hard to guess.
Built from consonant–vowel syllables, so you can say it out loud. Shorter to remember but weaker per character.
Your password
- Character pool
- —
- Online attack (1k guesses/s)
- —
- Offline attack (10B guesses/s)
- —
Estimates assume an attacker who knows exactly how the password was generated and tries half the keyspace.
Check a password you already use
How to use the password generator
- Pick a style: Random for maximum strength, Passphrase for something you can memorise, Pronounceable for something you have to type by hand.
- Set the length or word count and tick the character sets you need — the entropy and crack-time estimate update with every change.
- Press Generate, then copy it straight into your password manager. Raise How many to make a batch and download them as a text file.
FAQ
Are the passwords really random?
Yes. Every character is drawn from crypto.getRandomValues(), the browser's cryptographic random source, using rejection sampling so no character is more likely than another. Nothing is generated on a server and nothing is stored.
How long should a password be?
For an account protected by rate limiting, 12 random characters is plenty. For a password manager master password or a disk encryption key, use a 6-word passphrase or 20+ random characters — roughly 77 bits, which no one can brute-force today.
What does “bits of entropy” mean?
It is the base-2 logarithm of the number of passwords the generator could have produced with your settings. Each extra bit doubles the work for an attacker; 60 bits is decent, 80 bits is comfortable, 100 bits is overkill.