Generate a cryptographically secure 16-character password in one click. The 16-character length is the modern standard recommended by NIST SP 800-63B for high-value accounts (email, banking, password managers). Pick a different length from the chips below if you need 8, 12, 20, or 32 characters.
A 16-character password built from a 94-character pool (lowercase + uppercase + digits + symbols) yields 104.9 bits of entropy — well above the 80-bit floor that modern standards (NIST SP 800-63B, OWASP) call "extremely strong" for high-value accounts. The math: 9416 = 3.7 × 1031 possible combinations. At 10 billion guesses per second (a fast offline GPU attack), that is roughly 1.18 × 1014 years to brute-force — about 8,500 times the current age of the universe.
If you need an 8-character, 12-character, 20-character, or 32-character password for different use cases, the chips above switch the length in one click. For the recommended 16-character default, just hit "Generate Password" — the tool defaults to 16 characters on every load.
If you need a different length, the chips above switch in one click. Each length has its own entropy profile:
For a fully flexible length picker, see the Password Generator by Length tool. For just the basic length-less password generator, see Password Generator. To check a password's strength, see the Password Strength Checker.
This 16-character password generator creates a cryptographically secure password of exactly 16 characters. It uses crypto.getRandomValues (the Web Crypto API) to produce 104.9 bits of entropy from a 94-character pool (a-z, A-Z, 0-9, symbols). A 16-character password is considered 'extremely strong' by modern standards (NIST SP 800-63B) and takes roughly 1.18 × 1014 years to crack at 10 billion guesses per second. Click 'Generate Password' for a new 16-character password, or pick a different length from the chips above.
A 16-character password is generated with 104.9 bits of cryptographic entropy — 'extremely strong' by every modern password strength checker (NIST, zxcvbn, Kaspersky). 16 characters is the new standard for email, banking, and password manager master accounts. The 16-character generator on this page uses crypto.getRandomValues (Web Crypto API), which is the same source of randomness as your browser's TLS connections. For shorter or longer passwords, use the preset chips (8/12/20/24/32/64 chars) or open /password_generator_by_length/.
A 16-character password is the modern sweet spot for high-value accounts — it produces 104.9 bits of entropy and is rated 'extremely strong' by every standard checker. To generate one, click the '16 chars' preset chip on this page (or any password tool on Toolzie). 16 characters is the default for many enterprise systems and is recommended by NIST SP 800-63B for top-tier security.
A 20-character password uses 131.1 bits of entropy and is 'extremely strong' — overkill for most consumer accounts but appropriate for password manager vaults, encryption keys, and admin credentials. To generate a 20-character password, click the '20 chars' preset chip on this page (or any password tool on Toolzie). 20 characters takes roughly 9.19 × 1021 years to crack at 10 billion guesses per second.
A 32-character password yields 209.7 bits of entropy and is the standard for password manager master passwords, encryption keys, and high-security admin credentials. To generate a 32-character password, click the '32 chars' preset chip on this page (or any password tool on Toolzie). 32 characters takes roughly 4.38 × 1045 years to crack at 10 billion guesses per second — well beyond the lifetime of the universe at any plausible attack rate.