Free
Word to HTML Converter
Turn Word documents (.docx) or text pasted from Word into clean HTML or Markdown for any website, CMS or email.
Password Generator
Make strong random passwords and passphrases with your browser’s secure random number generator. See how strong they really are, and check a password you already have, without anything leaving your device.
Choose your settings
Words are picked at random from a built-in list of 2,048 common English words, so each word adds 11 bits.
1 to 50 at once.
Made on your device with your browser’s secure random number generator. Nothing is sent anywhere, and passwords are never saved; only your settings are remembered in this browser.
Your password
What do these numbers mean?
Entropy counts how many different results your settings could produce. Each extra bit doubles the number of guesses an attacker needs. The time assumes someone has stolen a password database and is testing 10 billion guesses per second against a fast hash, which a single modern graphics card can do. Sites that store passwords with slow hashing, or that limit login attempts, make guessing far slower. The figure is an average: a lucky attacker could find it sooner.
All passwords
Check a password you already have
Checked on your device only. What you type never leaves your browser and is not stored.
The estimate looks for common passwords, dictionary words, repeats, sequences, keyboard patterns and dates. It is a rough guide, not a guarantee.
About the tool
How the Password Generator works
The Password Generator makes strong, random passwords and passphrases right in your browser. Choose a length and the kinds of characters you want, or switch to passphrase mode for a string of random words that is easier to type and remember. Every character or word is picked with your browser's cryptographically secure random number generator, using a method that makes each choice equally likely.
Next to each result you see its strength as entropy, measured in bits, and roughly how long it would take to guess at 10 billion guesses per second. That is the speed of a powerful computer attacking a stolen password database, so it is a cautious figure. The number assumes the attacker even knows the settings you used, which is why it is a fair, honest measure of a random password.
You can also check a password you already have. The checker looks for very common passwords, dictionary words, repeated characters, sequences such as abc or 123, keyboard patterns and dates, and explains what it finds. It is a rough guide rather than a guarantee. Everything runs on your device: no password is ever sent anywhere, and only your settings are remembered in this browser.
Frequently asked questions
Are the passwords sent or saved anywhere?
No. Passwords are created in your browser on your own device and never leave it. They are not stored either; only your settings, such as length and character types, are remembered in this browser so they are ready next time.
How random are the passwords?
They use crypto.getRandomValues, the secure random number generator built into your browser. Values that would make some characters slightly more likely are thrown away and redrawn, so every allowed character, and every word in passphrase mode, has exactly the same chance of being picked.
What do the bits of entropy and crack time mean?
Entropy counts how many different results your settings could produce; each extra bit doubles it. The time is the average needed to guess one at 10 billion guesses per second, the speed of a strong offline attack on a leaked database with a fast hash. Sites that use slow hashing or limit login attempts make guessing much slower.
Is a passphrase as safe as a random password?
It can be. Each word from the built-in list of 2,048 words adds 11 bits, so six words plus a number give about 75 bits, which is strong. Passphrases are longer, but much easier to remember and type, which makes them good for a password manager's master password or a device login.
How accurate is the check for my own password?
It is an estimate. It spots common passwords, dictionary words, repeats, sequences, keyboard patterns and dates, then counts the rest as random characters. Real attackers use bigger word lists and smarter rules, so treat a good score as a minimum, not a promise, and never reuse a password on more than one site.
More free AI tools
- Developer
- DeveloperFree
JSON Formatter & Validator
Format, validate and minify JSON, find errors by line, fix common mistakes, browse a tree view or convert to CSV.
- DeveloperFree
Base64 & URL Encoder / Decoder
Encode and decode Base64 text and files, turn images into data URIs, and encode, decode or parse URLs.