Quick answer
How do I create a strong password?
Use a long, random password: at least 12 characters, ideally 16 or more, mixing upper and lower case letters, numbers and symbols. This password generator creates one on your device with cryptographic randomness. A 16-character password like this has about 100 bits of entropy, far beyond brute-force attacks.
- Length: 16+ characters for email and banking
- Never reuse a password across sites
- Store it in a password manager and turn on two-factor authentication
What makes a secure password?
A secure password is long and truly random. Each extra character multiplies the number of guesses an attacker needs. The password generator measures this as entropy, in bits, and shows a strength label: below 40 bits is Weak, 40–59 is Fair, 60–79 is Strong and 80 or more is Very strong.
With all four character types and look-alikes removed, there are 82 possible characters. Here is how length changes the score:
| Length | Entropy | Strength |
|---|---|---|
| 8 characters | 50.9 bits | Fair |
| 12 characters | 76.3 bits | Strong |
| 16 characters | 101.7 bits | Very strong |
| 20 characters | 127.2 bits | Very strong |
How do you use the password generator?
- Set the length with the slider, from 6 to 64 characters. 16 is a good default.
- Tick the character types you want: uppercase, lowercase, numbers and symbols.
- Leave “Avoid look-alikes” on if you may need to read or type the password by hand.
- Press “New password” to compare a few options and check their strength, then copy the one you like in one tap.
Every password includes at least one character from each type you tick, so a site that demands a number or symbol will accept it.
Is anything stored or sent?
Nothing. Each password is created on your own device with the Web Crypto API. Ganakly never sees it, saves it or sends it anywhere. Paste it straight into your password manager.
How do I keep my passwords safe?
- Use a different password for every account
- Turn on two-factor authentication (an app or security key beats SMS)
- Store passwords in a password manager, not a notes app
- Never share OTPs or passwords over a call or message
Frequently asked questions
What makes a strong password?
Length matters most. A random password of 16 or more characters mixing upper and lower case letters, numbers and symbols is very hard to guess. Never reuse a password across sites.
Is this password generator safe?
Yes. Passwords are created on your own device with the Web Crypto API. They are never sent to Ganakly or stored anywhere.
How long should my password be?
Use at least 12 characters, and 16 or more for important accounts like email and banking. Longer random passwords are exponentially harder to crack.
What is password entropy?
Entropy measures how unpredictable a password is, in bits. A random 16-character password from about 80 possible characters has around 100 bits, which is far beyond what attackers can brute-force.
How do I remember strong passwords?
Use a password manager to store them, and turn on two-factor authentication for important accounts. You only need to remember one strong master password.
Should I avoid look-alike characters in a password?
It helps when you have to read or type a password by hand. The “Avoid look-alikes” option removes O, 0, I, l and 1, shrinking the pool from 87 to 82 characters, which costs only about 1.4 bits on a 16-character password.
Can I generate a numeric PIN?
Yes. Tick only Numbers, untick “Avoid look-alikes” so 0 and 1 are included, and set the length (the minimum is 6). A 6-digit PIN has only about 20 bits of entropy, so use digits-only passwords only where a service requires them.