Shop and workshop in Irrel · IT support for the Eifel, the Moselle and Luxembourg

Password generator

The password is created in your browser, from your device’s random number generator. It is not transmitted and not stored.

The generator needs JavaScript. You can do without: take four or five words that have nothing to do with each other and string them together.

Three rules that are enough

  1. A separate password for every account. If one is cracked, the others stay safe.
  2. A password manager remembers them. You only remember one. That’s what the blocks are good for.
  3. Second factor wherever possible. Then a stolen password on its own gets nobody anywhere.

Each block is a small picture with a contradiction: the first adjective contradicts the thing, like “cold FIRE” or “fast SNAIL”, which is why it sticks. Two digits go at the front and back, for example “27-cold-FIRE-quiet-slow-SERVER-colourful-81”. The generator calculates the entropy from the size of the word lists: that’s how many possibilities someone who knows the method has to try. The strength follows from it: strong from 60 bits, medium from 45, weak below that. Two blocks are medium, three are strong. For the master password of your password manager, use three.

To check whether your email address has turned up in a data leak, use the Identity Leak Checker of the Hasso Plattner Institute. Free of charge.