Online tools New Zealand
Password Generator
A strong password is long and unpredictable, and the best way to get one is to let the computer choose. This generator uses your browser's secure random number generator, shows how strong the result is in bits, and never stores or transmits it. Built for New Zealand users, with nothing sent to a server.
Free, no signup Runs in your browser
Your password
—Strength
—
Entropy
—
Characters in the pool
—
Length
—
Time to guess at 10 billion tries a second
—
Copy it
How do I create a strong password?
Use at least 14 to 16 characters chosen at random from several types, not a word with numbers added, and use a different one for every account, kept in a password manager. A random 16-character password drawn from letters, digits and symbols has about 104 bits of strength, which is far beyond any guessing attack.
Length beats complexity
Adding length is the cheapest way to add strength: each character multiplies the possibilities by the pool size. A 20-character password of letters only is stronger than a 10-character one with symbols. If you must type it, a longer password with fewer symbol types is easier to enter on a phone.
The worst passwords are those you can remember: names, dates, keyboard patterns and common words are tried first by attackers.
Use a password manager
Nobody can remember a different strong password for every site, so use a password manager, and turn on two-factor authentication where it is offered. The Australian Cyber Security Centre and New Zealand's National Cyber Security Centre both recommend long passphrases or password managers and multi-factor authentication for important accounts.
To share a Wi-Fi password by scanning, use the QR code generator.
How this is calculated
The rule, step by step, so you can check any figure by hand.
each character is chosen with crypto.getRandomValues, with rejection sampling so every character is equally likelyentropy in bits = length × log2(number of possible characters)at least one character from each chosen type is included, then the order is shuffledtime to guess = half the possibilities ÷ guesses per second
Entropy measures unpredictability. Each extra bit doubles the number of guesses an attacker needs, and 80 bits or more is considered very strong for an online account. A 16-character password using all four types has a pool of about 90 characters and roughly 104 bits.
The random generator matters. Ordinary random functions in programming languages are predictable and unsafe for passwords. The browser's secure generator draws from the operating system's entropy source, which is the right one for this job.
A worked example
A 16-character password using lower-case, upper-case, digits and symbols.
- Poolabout 90 characters
- Entropy, 16 × log2(90)about 104 bits
- StrengthVery strong
A password that cannot be guessed in practice.
The tool shows the actual figure.
Why this is safe
The password is generated in your page, shown to you and never leaves your device. The page does not store it, and closing the tab discards it. Do not use a generator that sends the password to a server.
What it leaves out
There is no passphrase mode and no pronounceable passwords. Some sites forbid certain symbols, so untick symbols if a site rejects the password.
What this calculator does not do
- Random characters only; no word passphrases
- Some sites restrict symbols
- You must store it yourself
- Strength assumes the password is used once
Common questions
Is this password generator safe?
Yes. It runs in your browser with the secure random number generator and sends nothing.
How long should a password be?
At least 14 to 16 characters for important accounts.
What is entropy?
A measure of unpredictability in bits. Higher is stronger.
Should I reuse passwords?
No. A leak at one site exposes every account that shares the password.
Where should I keep passwords?
In a reputable password manager, with two-factor authentication on the manager itself.
Where these numbers come from
- Australian Cyber Security Centre — passphrases and passwords Australian Government advice on creating and managing passwords
- National Cyber Security Centre NZ New Zealand's guidance on passwords and two-factor authentication
- Office of the Privacy Commissioner New Zealand's privacy regulator, for the Privacy Act 2020
Method last reviewed 2026-10-28 This calculator uses fixed rules rather than rates that change, and its method is re-checked against the sources above at least once a year. Out of date? Tell us and we will fix it.
Related NZ calculators
QR code generator
Make a QR code for a link, Wi-Fi, email or phone.
Open calculator Online toolsWord counter
Count words, characters and reading time.
Open calculator Online toolsText to speech
Read text aloud with your device's voices.
Open calculator Online toolsMeta tag generator
Generate title, description and social meta tags.
Open calculator