FizzyTools
Password generator
Make strong passwords, passphrases and PINs that meet any site's rules. Made on your device: nothing is sent or saved.
How it works
- 1Pick what you needA password, an easy-to-remember passphrase, or a PIN.
- 2Set the rulesLength, character types and the rules your site asks for. The strength updates as you go.
- 3Copy itCopy it into the sign-up form or your password manager. Need many? Make up to 1,000 at once.
How strong is strong?
| Label | Bits | Time to guess at 100 billion guesses a second | Example |
|---|---|---|---|
| Weak | under 50 | under about 2 hours | 8 small letters (37.6 bits) |
| Fair | 50 to 64 | up to about 3 years | 4-word passphrase (51.7 bits) |
| Strong | 65 to 79 | up to about 100,000 years | 6-word passphrase (77.5 bits) |
| Very strong | 80 and more | more than about 190,000 years | 16-character password (97.5 bits) |
Times assume an attacker who has stolen a site's password file and tries 100 billion guesses a second, and count the average (half the possibilities). They are estimates. Sites that lock after a few wrong tries are far safer.
Questions
Are these passwords sent or saved anywhere?
No. They're made in your browser with its secure random source, and they never leave your device. We don't save them, and closing the tab clears the Recent list. Only your settings, never your passwords, are remembered on this device.
How long should my password be?
For most accounts, 16 characters with all four character types is plenty (about 97 bits, Very strong). If a site limits the length, use the longest it allows. For your password manager or email, a 6-word passphrase is strong and easier to type.
Password or passphrase: which is better?
Both are strong if they're long enough. A passphrase is easier to remember and type on a phone; a password packs more strength into fewer characters, which suits sites with short limits.
Where do the passphrase words come from?
From the EFF word lists by the Electronic Frontier Foundation, used under a Creative Commons Attribution licence: 7,776 everyday words, or 1,296 shorter ones. You can also use your own words.
Can I use my own words?
Yes. Choose My own words, then paste them or open a .txt file. Repeats are removed, and the strength is worked out from how many different words your list has. A short list makes weak passphrases, and we'll say so. Your list stays in this tab and is never saved.
What do the bits mean?
Bits measure how many possible results there are with your rules: each extra bit doubles them. We count them exactly, because every result is equally likely. The time to guess assumes a stolen password file and 100 billion guesses a second.
Why avoid look-alikes?
Characters like 0 and O, or 1, l and I, are easy to mix up when you read a password aloud or type it on a TV. Leaving them out costs a little strength, which the meter shows.
Is a PIN safe?
Only where the phone, card or lock stops after a few wrong tries. A 6-digit PIN has about a million possibilities, which a computer can try in a moment, so never use a PIN as a password.
What happens to copied passwords?
They stay on your clipboard until you copy something else. If your device keeps a clipboard history or syncs it to your other devices, they're there too. Paste it straight into your password manager.
Can I make passwords for a whole team or class?
Yes. Open Many at once, choose up to 1,000, then copy them all or download a .txt file with one per line.