pwdgen

Exclude look-alikes (o O 0 I l 1) Use every selected set at least once

How strong is it?

Strength is measured in bits. Each bit doubles the number of possible passwords an attacker has to try.

Strength	Bits	Possible passwords	Time to crack*
Very weak	< 28	< 268 million	instantly
Weak	28+	268 million	0.01 seconds
Poor	36+	69 billion	3 seconds
Fair	44+	18 trillion	15 minutes
Moderate	52+	4.5 quadrillion	3 days
Good	60+	1.2 quintillion	2 years
Strong	68+	3 × 10²⁰	470 years
Very strong	80+	10²⁴	2 million years
Excellent	96+	8 × 10²⁸	9× age of the universe
Extreme	112+	5 × 10³³	600,000× age of the universe

* Average time for an attacker making 10 billion guesses per second, e.g. against a leaked password database. Websites that limit login attempts are far slower to attack. Holds only for random passwords like these.