Create up to 100 passwords at once with your current settings — handy for onboarding a team, seeding test data or rotating service accounts.
This tool uses your browser's cryptographic random number generator (the Web Crypto API) and does all of its work on your device. Nothing is sent to or stored on a Digi Dinos server. On a shared computer, close the page once you are done.
Why a strong password matters
Attackers no longer guess passwords by hand. With leaked password dictionaries and GPU clusters they test billions of candidates per second, so anything built from a birthday, a company name or a keyboard pattern such as qwerty falls in minutes — no matter how many symbols you sprinkle on top. What actually protects an account is unpredictability (entropy) and length, not visual complexity.
This generator removes the human factor entirely: every character is drawn from a cryptographically secure random source. Each result is shown with its estimated entropy in bits and how long a brute-force attack would take, so you can tell at a glance whether the password is strong enough for what you are protecting.
How to use the password generator
- Choose a mode — Pick a random password with symbols, or a passphrase made of easy-to-type English words.
- Set the length and character types — Drag the slider and tick uppercase, lowercase, numbers and symbols. A new password is generated automatically every time you change a setting.
- Check the strength — Read the strength bar, the entropy value and the estimated crack time, and add characters if you need more. Sixteen characters or more is a good target.
- Copy and store it — Copy the password to your clipboard and save it straight into a password manager, then clear your clipboard afterwards.
How length translates into strength
The figures below assume an offline brute-force attack against a fast hash at roughly 10 billion guesses per second. Notice how adding just four characters changes the answer by orders of magnitude.
| Length | Character set | Entropy | Estimated time to crack |
|---|---|---|---|
| 8 | a-z | 37.6 bit | About 10 seconds |
| 8 | a-z A-Z 0-9 | 47.6 bit | About 3 hours |
| 12 | a-z A-Z 0-9 | 71.4 bit | About 5,000 years |
| 16 | a-z A-Z 0-9 !#$% | 104.9 bit | About 60 trillion years |
| 20 | a-z A-Z 0-9 !#$% | 131.1 bit | Effectively unbreakable |
These are theoretical estimates only. A reused or already-leaked password is compromised instantly, however strong it looks.
Password habits worth keeping
- Use a different password for every service. Reuse is the single biggest reason one breach turns into many.
- Aim for 16 characters or more on anything that matters. Length beats complexity every time.
- Store generated passwords in a password manager rather than in notes, spreadsheets or plain text files.
- Turn on multi-factor authentication wherever it is offered — it is what saves you when a password does leak.
- Forced rotation on a schedule helps far less than changing a password the moment you hear about a breach.
- Never send a password over email or chat in plain text; use a time-limited secure sharing link instead.