Security tools

Password generator

Generate secure passwords with customizable criteria and analyze strength with entropy calculations, crack-time estimates, and GPU-scale reference tables.

← All tools

Generator

Choose length, character sets, and exclusions: then generate or analyze a password below.

Length: 16 characters

420

Uppercase letters (A-Z)

Lowercase letters (a-z)

Numbers (0-9)

Symbols (!@#$%^&*)

Advanced Options

Exclude similar characters (il1Lo0O)

Exclude ambiguous characters ({}[]()/\'"`~,;.<>)

Custom Characters (optional)

Add any additional characters to include in the password

Output & analysis

Generate a password above or paste one to inspect entropy and crack-time estimates.

Password to analyze

Enter any password to analyze its strength, or generate a new one using the options above.

Best practices

Use 12 or more characters with a mix of letters, numbers, and symbols
Consider long passphrases of random words (18+ characters)
Avoid common patterns, dictionary words, and personal information
Use unique passwords for each account
Enable two-factor authentication when available

Why strong passwords matter

Password strength directly affects the time required for attackers to crack a password. The more characters and greater complexity (including uppercase, lowercase, numbers, and special symbols), the longer it takes to brute-force.

⚠️ Modern attack capabilities

For modern systems using high-end GPUs like the RTX 4090, attackers can attempt 80+ billion password combinations per second for fast hashes. Short, simple passwords (under 8 characters) can often be cracked in seconds or minutes.

Crack time reference table

Password Type	8 Chars	12 Chars	16 Chars
Numbers only	< 0.01 seconds	< 0.01 seconds	0.02 seconds
Lowercase letters only	0.03 seconds	8.1 seconds	4.1 hours
Upper & lowercase	2.1 seconds	3.8 hours	104 years
Upper/lower, numbers, symbols	10.6 minutes	1,840 years	46.1 billion years

System:

12× NVIDIA GeForce RTX 5090 (Blackwell, Jan 2025). ~4.8 TH/s NTLM. Requires enterprise-grade motherboard (4U server with PCIe bifurcation), NVLink optional, ~5–6 kW power draw.

Note: These estimates assume brute-force attacks. Dictionary attacks and social engineering can compromise passwords much faster. Always use unique, complex passwords and enable additional security measures like 2FA.