32 character password generator
Made on your device. Never sent or stored.
A random 32 character password, generated on your device. Change the character types below; the length stays at 32 unless you move it.
Is 32 characters long enough?
Thirty-two characters gives about 206 bits with all types, or 190 bits with letters and digits only. It is a common length for machine secrets.
When to use it: For API keys, webhook signing secrets, JWT secrets, database passwords and environment variables. Letters and digits only avoids escaping problems in config files.
How strong is a 32 character password?
A random 32 character password from letters and digits has 190.5 bits of entropy. With symbols added it has 206.2. Here is how that translates into guessing time for each character set.
| Characters | Pool | Bits | Fast hash | Slow hash |
|---|---|---|---|---|
| Digits only | 10 | 106.3 | 158 trillion years | 158 quintillion years |
| Lowercase letters | 26 | 150.4 | over 1027 years | over 1033 years |
| Letters, both cases | 52 | 182.4 | over 1037 years | over 1043 years |
| Letters and digits | 62 | 190.5 | over 1039 years | over 1045 years |
| All four types (this site) | 87 | 206.2 | over 1044 years | over 1050 years |
These figures only hold for random passwords like the ones above. A 32 character password you made up, with words, names or dates, is guessed far sooner. Test one with the strength checker.
Questions
How many combinations does a 32 character password have?
With the 87 characters used here, 87 to the power 32, about 1062. With letters and digits only, 62 to the power 32, about 1057.
Is this password stored anywhere?
No. It is generated in your browser with the Web Crypto API and never sent to a server.
Sources
- SP 800-63B-4, section 3.1.1.2: Password Verifiers, National Institute of Standards and Technology. Checked 18 October 2026.