Password generator
The password is created in your browser, from your device’s random number generator. It is not transmitted and not stored.
The generator needs JavaScript. You can manage without it: take four or five words that have nothing to do with each other and string them together.
Three rules that are enough
- A separate password for every account. If one is cracked, the others stay safe.
- A password manager remembers them. You only remember one. That’s what the word pairs are good for.
- Second factor wherever possible. Then a stolen password on its own gets nobody anywhere.
The generator calculates the strength honestly from the size of the word lists: that’s how many possibilities an attacker who knows the method has to try. From about 60 bits it’s fine for everyday accounts. For the master password of your password manager, go well beyond that with more word pairs.
To check whether your email address has turned up in a data leak, use the Identity Leak Checker of the Hasso Plattner Institute. Free of charge.