← All Tools

Password Security Suite

Generate, analyze, and hash passwords. All client-side except bcrypt.

Generation and analysis happen locally in your browser. Bcrypt hash/verify is server-assisted: the password you enter in that mode is sent over HTTPS to our server, hashed in memory with PHP password_hash(), and discarded — never stored or logged. Do not use it with a password that is already in use.

Password Options

8 128

Passphrase Generator

Generate memorable passphrases using random words (Diceware-style).

3 10

Password Strength Reference

Entropy Levels

  • Weak: < 40 bits
  • Fair: 40-59 bits
  • Good: 60-79 bits
  • Strong: 80-99 bits
  • Very Strong: 100+ bits

Best Practices

  • Use unique passwords for each account
  • Aim for 80+ bits of entropy
  • Use a password manager
  • Enable 2FA when available
  • Avoid personal information

Character Sets

  • Uppercase: 26 characters
  • Lowercase: 26 characters
  • Numbers: 10 characters
  • Symbols: 32 characters
  • All combined: 94 characters

Passphrase Benefits

  • Easier to remember
  • High entropy with fewer characters
  • Resistant to dictionary attacks
  • 2048-word list → 11 bits/word
  • 4 random words = 44 bits
  • 6 random words = 66 bits