64 character password generator
Made on your device. Never sent or stored.
A random 64 character password, generated on your device. Change the character types below; the length stays at 64 unless you move it.
Is 64 characters long enough?
Sixty-four characters is the length NIST says verifiers should accept at minimum, so any system following SP 800-63B-4 should take it. It is also the top of what many password fields allow.
When to use it: For Wi-Fi keys (WPA2 and WPA3 personal accept up to 63 characters), encryption passphrases and secrets that never need typing.
How strong is a 64 character password?
A random 64 character password from letters and digits has 381.1 bits of entropy. With symbols added it has 412.3. Here is how that translates into guessing time for each character set.
| Characters | Pool | Bits | Fast hash | Slow hash |
|---|---|---|---|---|
| Digits only | 10 | 212.6 | over 1046 years | over 1052 years |
| Lowercase letters | 26 | 300.8 | over 1072 years | over 1078 years |
| Letters, both cases | 52 | 364.8 | over 1092 years | over 1098 years |
| Letters and digits | 62 | 381.1 | over 1096 years | over 10102 years |
| All four types (this site) | 87 | 412.3 | over 10106 years | over 10112 years |
These figures only hold for random passwords like the ones above. A 64 character password you made up, with words, names or dates, is guessed far sooner. Test one with the strength checker.
Questions
How many combinations does a 64 character password have?
With the 87 characters used here, 87 to the power 64, about 10124. With letters and digits only, 62 to the power 64, about 10114.
Is this password stored anywhere?
No. It is generated in your browser with the Web Crypto API and never sent to a server.
Sources
- SP 800-63B-4, section 3.1.1.2: Password Verifiers, National Institute of Standards and Technology. Checked 18 October 2026.