Why "Advanced"?
Basic password generators spit out a random string of characters. That's fine for simple needs. But this tool goes further, giving you precise control over exactly what goes into your password:
- Minimum counts per category — ensure at least 2 uppercase letters, at least 1 symbol, at least 3 digits, so your password actually meets complex site requirements without retrying repeatedly
- Character exclusions — remove easily confused characters like
0, O, l, 1, I that cause transcription errors when typing passwords manually
- Custom character sets — add or restrict specific symbols if a site has quirky requirements
- Pronounceable mode — alternates between consonants and vowels to generate passwords that are genuinely easier to say aloud when reciting to someone
How Password Strength Actually Works
A password's strength is measured by the effort required to crack it through brute force — trying every possible combination.
The relevant metric is entropy: the number of bits required to describe the uncertainty in your password. More entropy = more possible combinations = harder to crack.
Entropy (bits) = log₂(Alphabet size ^ Password length)
= Password length × log₂(Alphabet size)
| Alphabet | Size | 12-char entropy | 20-char entropy |
|---|
| Digits only (0-9) | 10 | 39.9 bits | 66.4 bits |
| Lowercase only | 26 | 56.4 bits | 94.0 bits |
| Lower + Upper | 52 | 67.9 bits | 113.1 bits |
| Lower + Upper + Digits | 62 | 71.5 bits | 119.1 bits |
| Full printable ASCII (96 chars) | 96 | 78.9 bits | 131.5 bits |
What do these numbers mean in practice?
- < 40 bits: Crackable in seconds with modern hardware
- 40–56 bits: Crackable in hours to days
- 60–80 bits: Would take years on dedicated hardware — fine for most accounts
- 80–100 bits: Practically uncrackable by brute force with current technology
- > 100 bits: Would require astronomical time even with future hardware
For your primary email and financial accounts, aim for 80+ bits. A 16-character password with full mixed character set sits around 104 bits.
Configuration Options Explained
Length
Longer is better, full stop. Each additional character multiplies the total search space by the alphabet size. A 20-character password is not just 4 characters better than a 16-character one — it's 96⁴ = ~85 million times harder to brute-force.
Uppercase letters (A-Z)
Doubling your effective alpha...
Looking for a more detailed deep-dive and advanced tips?
Read Full Article on our Blog