Password generator

Makes a strong random password in your browser. Nothing is sent to a server.

Your password

Generating

Strength

Excellent

119.1 bits of randomness.

Length

Characters.

Character pool

Different characters used.

Time to crack

longer than the age of the Earth

At a trillion guesses a second.

Options

A new password is made every time you change one

How long?

20characters

characters

8326496128

Lowercase a to z

Uppercase A to Z

Numbers 0 to 9

Symbols ! # $ % and the rest

No look-alikes Leave out 0 O 1 l I

This password is made in your browser with the Web Crypto random generator. It is never sent to Ken or anyone else, and nothing is stored.

DKIM key generator

Then

What's my IP

Put Ken on the rest of your outbound

Inboxes, warmup, leads and copy in one place. Ken runs these checks on every inbox it manages.

Start free - 1,000 credits, no card

What the password generator does

It creates random passwords in your browser with the Web Crypto API, the cryptographic random source browsers use for encryption keys. Pick a length and the character sets. Nothing is sent to a server, and Ken never sees the password.

What makes a password strong

Length, mostly. Each character drawn at random from the 94 printable ASCII symbols adds about 6.6 bits of entropy, multiplying the number of possible passwords by 94. A random 16-character password from that set has about 105 bits, far beyond what anyone can brute-force.

NIST's guidance in SP 800-63B puts length ahead of composition rules and drops forced periodic changes. Change a password when there's a reason, like a breach.

How to use it well

Use a different password for every account, so a breach on one site can't open the others.
Keep them in a password manager, not a document or a browser note.
Turn on two-factor authentication where you can, and always on email accounts.
If a system rejects symbols, drop them and add length instead.

Why it matters for cold email

A cold email setup can mean dozens of inboxes across several domains, plus a registrar, a DNS host and a sending tool. That's a lot of credentials, and an attacker who takes over one inbox can send spam that burns the domain for every inbox on it.

Give each inbox its own random password, keep them in a shared vault, and turn on 2-step verification for the admin accounts that control them.

Questions

How long should a password be?

16 characters or more for random passwords you keep in a manager. For one you type from memory, a passphrase of four or five random words is strong and easier to type.

Is it safe to use an online password generator?

Only one that generates in your browser and sends nothing. This one uses Web Crypto on your device. A generator that builds passwords on a server could log them, and you'd never know.

Do I need symbols for a strong password?

No. Length adds more strength than symbols. A random 20-character password of letters and digits is far stronger than a random 10-character one with symbols. Add symbols when a site requires them.

What is password entropy?

A measure, in bits, of how many guesses a password takes. For a random password it's the length times log2 of the number of possible characters, and each extra bit doubles the guesses. It only describes random passwords, not ones a person picked.

How often should I change my passwords?

When there's a reason: a breach, a leaked password or someone leaving the team. NIST dropped forced periodic changes because they push people toward weaker, predictable passwords.