Passwords are generated on our server and are never stored, logged or shared.
Wondering what actually makes one password stronger than another, and why
P@ssw0rd123! is weaker than it looks?
Strong
Password Examples — and Why You Should Not Use One works through the maths,
the length-versus-complexity trade-off, and the passphrase method.
Frequently Asked Questions
A strong password is at least 12 characters long and combines uppercase letters, lowercase letters, numbers, and special symbols. Longer passwords with more character types have significantly higher entropy and are much harder to crack.
The strength score is calculated on a 0–100 scale based on factors including password length, character set variety (uppercase, lowercase, digits, symbols), and entropy bits. Higher scores indicate stronger passwords.
You can set the password length and choose which character types to include: uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and special symbols. Enabling more types increases the character set and overall strength.
Entropy measures the unpredictability of your password in bits. Higher entropy means exponentially more combinations an attacker must try. A password with 128+ entropy bits is considered very secure against brute-force attacks.
No. Passwords are generated on our server and returned to you over an encrypted connection, then discarded immediately. Nothing is stored, logged or shared. For an account you consider critical, the generator built into a password manager is still the better choice, because it creates and saves the password in one step.
Security experts recommend changing passwords immediately after a data breach. For general use, using a unique strong password per site (managed with a password manager) is more effective than frequent changes.