Password Generator: Random or Memorable
Create strong passwords you can actually remember. Every password comes with a memory hint, a strength score and crack-time estimate, and it is generated on your device, never sent anywhere.
🔒 Generated on your device, never sent anywhere. Nothing you type or generate leaves this browser tab: no server calls, no analytics, no storage.
…
How it was built
Pool of 78 characters from the sets you ticked. One character from each set is guaranteed; the rest are drawn with crypto.getRandomValues and rejection sampling (no modulo bias), then shuffled.
Entropy: 16 characters × log₂(78 possible) = 100.6 bits
About this tool
How it works: Random mode draws each character with your browser's cryptographic random generator (crypto.getRandomValues) and rejection sampling, so no character is more likely than another. Memorable mode takes a phrase (your own, or 3–4 random words the tool picks), strips accents, swaps some letters for look-alike digits and symbols at random, adds capitals and a random extra, and shows which chunk came from which word. Passphrase mode strings together 4–6 random words from the EFF large wordlist.
Why random extras matter: cracking tools already try common leetspeak swaps (a→4, e→3, o→0) of dictionary words and popular phrases, so a pure swap of a well-known phrase is weaker than it looks. The 2–3 random digits and 1–2 symbols you did not choose, placed at a random word boundary, are what make a memorable password genuinely strong. Random words picked by the tool beat a phrase you chose for the same reason.
Tips: use a password manager, never reuse a password across sites, and turn on two-factor authentication (2FA) wherever it is offered. Need other everyday tools? Try the percentage calculator, tip calculator or age calculator.
Formula
Random: entropy = L × log₂(N) (N = 78 with all four sets)Passphrase: entropy = words × log₂(7,776) ≈ 12.9 bits per wordRandom phrase: ≥ words × log₂(4,438) + log₂(11) + 2·log₂(10) + log₂(words)Index = x mod n, redrawn while x ≥ 2³² − (2³² mod n) (x = random uint32)zxcvbn score 0–4: guesses < 10³, 10⁶, 10⁸, 10¹⁰, ≥ 10¹⁰
How it is calculated
- Choose a mode: Random, Memorable or Passphrase.
- Set the options: length and character sets, phrase source and random extras, or number of words and separator.
- Pick one of the 5 variants and check its zxcvbn score and estimated crack time.
- Learn it with the memory hint (word chunks or one spoken word per character), then copy it.
- Save it in a password manager, use it on one site only and turn on 2FA.
Questions
Is this password generator safe?
Yes. Everything runs in your browser with crypto.getRandomValues, the same cryptographic random source password managers use. Your phrase and the passwords are never sent to a server, logged, stored, put in the address bar or included in analytics. You can even disconnect from the internet after the page loads and it keeps working.
Are leetspeak passwords secure?
Not on their own. Cracking tools try common swaps like a→4, e→3 and o→0 on dictionary words and popular phrases, so p4ssw0rd is found almost instantly. What makes a memorable password strong is randomness you did not choose: random words picked by the tool, per-letter random swaps and the random digits and symbols added by the "random extras" option. Keep that option on, and treat the zxcvbn score as an estimate, not a guarantee.
How long should a password be?
For random passwords, use at least 12–16 characters with all four character sets; 16 characters from 78 symbols is about 100 bits of entropy. For passphrases, 5–6 random words (about 65–78 bits) are strong and easier to type. NIST SP 800-63B asks services to accept at least 64 characters, so longer is fine wherever it is allowed.
How does the memory hint work?
In memorable mode the password is split into chunks, each mapped back to its word, for example Purp13 = "purple", T!g3r = "tiger", #47 = random extra, plus a sentence such as "Purple tiger jumps #47". In random mode, open "How to remember it" to get one spoken word per character, for example k7#Q = kite, seven, hash, capital Queen. Hints are hidden together with the passwords when you press Hide.
What is a passphrase and why the EFF wordlist?
A passphrase is several random words in a row, such as "cactus-gravity-snorkel-ember-tulip". The Electronic Frontier Foundation's large wordlist has 7,776 common, distinct English words, so each word adds about 12.9 bits of entropy. Strength comes from the random choice, not from the words being unusual, which is why they must be picked by the generator, not by you.