Result
Result reflects the current submitted inputs.
- Risk B
- Reviewed 2026-05-26
- 4 sources
- Entropy is an estimate based only on length and character set size under independent uniform selection.
- The generated password is deterministic in this packet so fixtures are reproducible.
- This module does not use global randomness, DOM APIs, network APIs, or time.
- A production UI must inject cryptographically strong random indexes or bytes from an appropriate runtime source.
- The output is not a guarantee that a password is safe for any specific service, threat model, or compromised-password blocklist.
Accuracy notes
- Risk level
- B
- Reviewed
- 2026-05-26
- Sources
- 4
- Primary result
- Generated password
Formula logic is kept in a pure calculator module with fixtures, source notes, and page-visible assumptions.
What the result means
Use Generated password as the headline answer for password. Deterministic password sample for the selected character set. Use the primary result for the password task, then check the secondary outputs for context. Use estimated entropy, character set size, and estimated search space to explain why generated password moved when an input changed. Copy the result only after the inputs, assumptions, and source notes match your case. Check unit handling, rounding, included inputs, excluded inputs, and source version before treating the result as final.
Use the result this way
- Start with Generated password, then use supporting outputs only to explain the primary answer.
- Verify password length, uppercase letters, and lowercase letters before copying the result.
- Choose the mode or method first because it can change which formula is applied and stay within the documented minimum and maximum ranges.
- Copy the result only after the inputs, assumptions, and source notes match your case.
User job
How to use this calculator
Use Password Generator when you need generated password, then use estimated entropy and character set size to check the context for quick number work, classwork, spreadsheet checks, and explaining a calculation to someone else.
Best for
- Checking the core numeric relationship
- Comparing the main result with supporting outputs
- Reviewing a default example before entering your own password length and uppercase letters.
Check before relying
- Confirm sign, decimal, percent, and rounding assumptions before copying the number.
- Entropy is an estimate based only on length and character set size under independent uniform selection.
- The generated password is deterministic in this packet so fixtures are reproducible.
- Source context: National Institute of Standards and Technology, reviewed 2026-05-26.
Next useful step
- Random Number GeneratorUse next when you need generated numbers from minimum and maximum after checking generated password.
- Dice RollerUse next when you need dice notation from number of dice and sides per die after checking generated password.
- Base64 Encode / DecodeUse next when the developer utility task needs output text instead of generated password.
Formula
Build the selected character set, select each character with a deterministic seeded generator for testability, and estimate entropy as length x log2(character set size). Key assumptions: Entropy is an estimate based only on length and character set size under independent uniform selection. The generated password is deterministic in this packet so fixtures are reproducible. This module does not use global randomness, DOM APIs, network APIs, or time.
- Build the selected character set, select each character with a deterministic seeded generator for testability, and estimate entropy as length x log2(character set size).
- Entropy is an estimate based only on length and character set size under independent uniform selection.
- The generated password is deterministic in this packet so fixtures are reproducible.
- Primary source context: National Institute of Standards and Technology.
Inputs
Enter password length, uppercase letters, lowercase letters, and numbers for number checks, homework, spreadsheet review, and quick comparisons. Before calculating, choose the mode or method first because it can change which formula is applied and stay within the documented minimum and maximum ranges. Password length: Number of characters to generate. Longer random passwords have more search space. Uppercase letters: Allow A-Z in the generated password. Lowercase letters: Allow a-z in the generated password. Numbers: Allow 0-9 in the generated password.
Example
Using the default inputs, Password Generator returns generated password of ngmFf{A.QyC=5[Fr. Adjust password length, uppercase letters, lowercase letters, and numbers to match your own scenario.
FAQ
How is generated password calculated here?
Build the selected character set, select each character with a deterministic seeded generator for testability, and estimate entropy as length x log2(character set size). The first assumption to check is: Entropy is an estimate based only on length and character set size under independent uniform selection.
What does Generated password mean for password?
Use the primary result for the password task, then check the secondary outputs for context. Secondary values such as estimated entropy, character set size, and estimated search space are there to explain the primary answer, not to replace it.
What should I enter for Password length?
Number of characters to generate. Longer random passwords have more search space. Choose the mode or method first because it can change which formula is applied and stay within the documented minimum and maximum ranges.
How does Uppercase letters change generated password?
Allow A-Z in the generated password. Changing it can alter generated password because the formula uses the submitted inputs together. Also compare unit handling, rounding, included inputs, excluded inputs, and source version.
Why does the password example show ngmFf{A.QyC=5[Fr for generated password?
The default inputs produce ngmFf{A.QyC=5[Fr for generated password. Treat that as a format and scale check, then replace every default value with your own inputs.
Why does rounding matter for generated password?
Rounding affects the displayed answer and can compound if you reuse the number. Keep more precision for intermediate work when the next step depends on it.
Sources
Last reviewed: 2026-05-26
- Reviewed 2026-05-26NIST SP 800-63B, Digital Identity Guidelines: Authentication and Authenticator ManagementNational Institute of Standards and Technology. Length-first password guidance, blocklist caution, and the need for approved/random bit generation when secrets are randomly generated.
- Scope
- Memorized secret and random authenticator guidance. This packet uses it for conservative password guidance, not as a guarantee of password safety.
- Supports
- Length-first password guidance, blocklist caution, and the need for approved/random bit generation when secrets are randomly generated.
- Reviewed 2026-05-26OWASP Authentication Cheat SheetOWASP Cheat Sheet Series. Allowing long passwords and broad printable character support while avoiding brittle composition claims.
- Scope
- Application authentication guidance for password policy and user-generated passwords.
- Supports
- Allowing long passwords and broad printable character support while avoiding brittle composition claims.
- Reviewed 2026-05-26RFC 4086: Randomness Requirements for SecurityInternet Engineering Task Force. Entropy framing and the distinction between estimated search space and real-world secret strength.
- Scope
- Security-focused randomness and entropy considerations.
- Supports
- Entropy framing and the distinction between estimated search space and real-world secret strength.
- Reviewed 2026-05-26Web Cryptography APIWorld Wide Web Consortium. Future UI guidance to inject cryptographically strong random bytes or indexes instead of using formula-level global randomness.
- Scope
- Browser cryptographic API specification.
- Supports
- Future UI guidance to inject cryptographically strong random bytes or indexes instead of using formula-level global randomness.
Disclaimer
This calculator is an educational estimate based on the inputs and assumptions shown on the page.