Question 1

Is this password generator safe to use?

Accepted Answer

Yes. The password comes from your browser's own cryptographic random number generator, right on your machine. The page sends nothing to a server, stores nothing and has no tracking on the generator itself. You can disconnect from the internet before pressing the button and it works just as well.

Question 2

How long should a password be?

Accepted Answer

At least 16 characters for anything that matters, and longer is better. Length counts for more than special characters: every extra character multiplies the number of combinations an attacker has to try, while a single symbol adds only a little. If you use a password manager, choosing 24 or 32 characters costs you nothing.

Question 3

How is the crack time calculated?

Accepted Answer

The estimate starts from the entropy, meaning how many possible combinations the password has, and assumes a worst case where an attacker guesses around a trillion passwords per second against a leaked database. The number is an estimate, not a guarantee. If the password leaks in plain text, no length will help.

Question 4

Do I need a separate password for every service?

Accepted Answer

Yes. When one service leaks, the email and password are sold on and tried automatically against hundreds of other sites. That is called credential stuffing, and it is the most common way accounts get hijacked. One unique password per service means a leak stops where it happened.

Question 5

How am I supposed to remember a random password?

Accepted Answer

You are not. Use a password manager, which remembers and fills it in for you, so you only need one good master password. Your browser's built-in password storage is also far better than reuse. If you must know one password by heart, four or five random words are both easier to remember and stronger than eight cryptic characters.

Question 6

Is a password generator better than making one up myself?

Accepted Answer

Yes, almost always. People choose predictably: names, years, keyboard patterns and common words with an exclamation mark at the end. Cracking tools are trained on exactly those patterns and on lists of leaked passwords. A random generator has no habits to exploit.

Question 7

What are the most used passwords in Norway?

Accepted Answer

In Norway the most used password is qwerty123, followed by qwerty1, 123456, 123456789 and passord, according to the NordPass list for 2024 as reported by digi.no. Further down the Norwegian top 20 you find lol123, liverpool, mamma123 and hemmelig. Every number sequence and qwerty variant is cracked in under a second, because they sit at the top of every wordlist attackers use.

Question 8

Is it safe to paste my own password into the checker?

Accepted Answer

The password never leaves your browser. The checker calculates entropy and crack time locally and sends nothing to any server. If you are still unsure, test with a password that resembles yours instead of the real one.

Password generator

How the generator works

Tips from an ethical hacker

What people ask
about passwords and the generator.

Want your whole team to get this?