10 character password generator
Made on your device. Never sent or stored.
A random 10 character password, generated on your device. Change the character types below; the length stays at 10 unless you move it.
Is 10 characters long enough?
Ten characters adds about 13 bits over eight, roughly 7,500 times more work for an attacker, but it still sits below the NIST minimum of 15 for a password that protects an account alone.
When to use it: A reasonable floor for low-value accounts that also use two-factor authentication.
How strong is a 10 character password?
A random 10 character password from letters and digits has 59.5 bits of entropy. With symbols added it has 64.4. Here is how that translates into guessing time for each character set.
| Characters | Pool | Bits | Fast hash | Slow hash |
|---|---|---|---|---|
| Digits only | 10 | 33.2 | under a second | 6 days |
| Lowercase letters | 26 | 47.0 | 2 hours | 224 years |
| Letters, both cases | 52 | 57.0 | 84 days | 229,034 years |
| Letters and digits | 62 | 59.5 | 1 year | 1 million years |
| All four types (this site) | 87 | 64.4 | 39 years | 39 million years |
These figures only hold for random passwords like the ones above. A 10 character password you made up, with words, names or dates, is guessed far sooner. Test one with the strength checker.
Questions
How many combinations does a 10 character password have?
With the 87 characters used here, 87 to the power 10, about 1019. With letters and digits only, 62 to the power 10, about 1017.
Is this password stored anywhere?
No. It is generated in your browser with the Web Crypto API and never sent to a server.
Sources
- SP 800-63B-4, section 3.1.1.2: Password Verifiers, National Institute of Standards and Technology. Checked 18 October 2026.