How long should a password be?

Security experts recommend at least 16 characters. A 20-character random password provides over 130 bits of entropy — computationally infeasible to brute-force.

What makes a password strong?

Length, randomness and character variety (uppercase, lowercase, numbers, symbols). It must not contain dictionary words, names, dates or predictable patterns.

What is a passphrase and is it secure?

A passphrase is a sequence of random words (e.g. 'correct horse battery staple'). A 4-word passphrase gives ~44 bits of entropy; 6 words gives ~77 bits — more than most 10-character complex passwords.

Is the GoChronos password generator cryptographically secure?

Yes. Passwords are generated using the Web Crypto API (window.crypto.getRandomValues). Nothing is transmitted to any server — generation runs entirely in your browser.

Should I use a password manager?

Yes. A password manager lets you store a unique, long, randomly generated password for every site without needing to memorise them.

Password & Passphrase Generator