64 character password
The limit most systems accept. Needed where the password lives in a manager or a config file and is never typed by hand.
Space — new password · C — copy · M — hide
Password length
Character sets
Select at least one character set.
Passphrase settings
A 2048-word list gives exactly 11 bits per word (the Diceware method). Six words are 66 bits, eight are 88. The words are drawn by a cryptographic generator, not by a human — that is the whole point.
Password pattern
a — lowercase, A — uppercase, L — any letter, 9 — digit, # — symbol, X — letter or digit, * — any enabled character, c/v — consonant/vowel. Every other character is copied as is, \ escapes the next one.
Fine tuning
“Safe symbols only” keeps !@#$%^&*_-+=? — almost every site accepts them and they do not break shell commands, CSV or SQL.
Recent passwords (this tab only)
What happens to your password
The password is assembled in your browser from the cryptographic randomness source crypto.getRandomValues with rejection sampling, so every character is equally likely.
The page never sends passwords to a server, never writes them to browser storage and drops the history when the tab closes.
Password letter by letter
Phonetic spelling for reading a password out over the phone. Letter case is stated separately.
Why so many
See the questions below for details.
You do not type this password
See the questions below for details.
Questions
Frequently asked questions
Is there any point in 64 characters?
Not for unguessability: 32 characters are already beyond brute force. The point is format. Sixty-four characters are often demanded as a specification: a key length, a token size, a standard requirement.
Why 64 specifically?
It is a common password length limit in systems, and 64 hexadecimal characters are exactly 256 bits — the familiar size of an encryption key.
What if a service rejects that length?
Check the hint in the form; the limit is usually stated. Take the maximum accepted and rely on a second factor, which gives more than doubling the length.
How do I type such a password?
You do not — only by pasting from a password manager. A password you must type by hand should be a passphrase, not a string of symbols.
Next