Password generator
Generated in your browser with
crypto.getRandomValues, never transmitted, and shown with an
honest estimate of what it would take to crack. Length beats cleverness:
each extra character multiplies the work.
How the estimate works
Entropy is length × log₂(alphabet size). The table assumes an offline attacker with dedicated hardware trying 100 billion guesses per second against a fast hash, which is the pessimistic case that matters when a password database leaks. Online guessing against a rate-limited login is millions of times slower.
Already have a password you are wondering about? Check whether it has appeared in breaches with the password breach checker (it never leaves your browser either).
Passwords are one factor of many.
Moorfox's security score checks the rest of the machine: disk encryption, AV and EDR, patch age, UAC and the guest account, so a strong password is not defending a soft target.