Utilities
Password generator
Random passwords and phrases that do not leave your browser.
What makes up password strength
Passwords are selected not 'by meaning,' but by trying different options. The more possible combinations there are, the longer the hacking program works. The number of options is measured in bits of entropy: each bit doubles the search space.
The password generator has four independent sets of characters: lowercase Latin letters (26), uppercase (26), digits (10), and special characters (26). Together, this is 88 characters — almost one and a half times more than letters and digits without symbols. But it's the product that matters. lengths и alphabet size.
Entropy in bits
The formula is simple: length × log₂(alphabet). For a phrase of words - words × log₂(dictionary). Below are guidelines to understand the scale.
| What is the password | Options | Entropy |
|---|---|---|
| 8 characters, letters and numbers | 62⁸ | ≈ 48 bits |
| 12 characters, letters and numbers | 62¹² | ≈ 71 bits |
| 16 characters, all sets | 88¹⁶ | ≈ 103 bits |
| 6 words from the dictionary of 120 words | 120⁶ | ≈ 41 bits |
| 8 words from the 120-word dictionary | 120⁸ | ≈ 55 bits |
Phrase or password
A password of 16 random characters is almost impossible to remember — it belongs in a password manager. A phrase of 6–8 short words is remembered by a person like an image, and the entropy ends up being comparable to a 10–12-character password. For the master password of a manager, a phrase works better: it can be entered by hand and you don’t have to worry about forgetting it.
If the dictionary is small, the phrase can be easily guessed by a dictionary attack. Therefore, in the generator, words are taken with equal probability from a fixed list, rather than 'based on' your life.
Why you shouldn't reuse passwords
A leak from one service should not expose the others. Attackers take a database of logins and passwords and try it on all popular sites — this is called credential stuffing. One password for ten services means that any leak turns into the loss of all ten accounts at once.
A separate problem is 'almost identical' passwords like qwerty2024 и
qwerty2025. The rules for replacing numbers are known to hacking tools, so such options do not provide an advantage. A random string from a generator gives.
What to do after generation
- Save the password in a manager, not in a chat or a note on the desktop;
- Enable two-factor authentication wherever it is available;
- do not send your password in messengers — even to yourself;
- Replace it if the service reported a leak.