Tooloat

Strong password generator

Create passwords that are actually hard to guess. Choose the length and character sets, or generate a passphrase from a list of 7,776 words. Entropy is measured from how the value was made, with crack time estimates for online and offline attacks. Nothing is stored or sent.

Tooloat runs in your browser and needs JavaScript. It opens in a moment, and your files are processed on your device.

How it works

  1. Pick password, passphrase or PIN.
  2. Set the length and options.
  3. Copy the result. Regenerate as often as you like.

Why use it

  • Unbiased selection from the cryptographic random generator.
  • EFF long word list for passphrases.
  • Entropy in bits and crack time estimates.
  • Option to avoid look alike characters.

Questions and answers

How long should a password be?

For a password manager entry, 16 to 20 random characters is a strong choice. A passphrase of five or more random words is also strong and easier to type.

Are the passwords stored?

No. They are created in your browser and disappear when you leave the page.

What does entropy mean?

It is the number of bits of unpredictability. Each extra bit doubles the number of guesses needed.

Related tools