Security
How to Create a Strong Password (and Actually Remember It)
Why long passwords beat complex ones, how to use a password generator correctly, and random vs pronounceable passwords explained.
Length beats complexity
A 20-character lowercase password has more combinations than a 10-character password using every character type. Length is the single most important factor in password security.
Random vs pronounceable
- Random (e.g.
k#9mQz!2xL) — maximum entropy. Best for password managers where you never type it manually. - Pronounceable (e.g.
kovelimura) — alternates consonants and vowels. Easier to type and memorise, only slightly weaker.
How to generate a secure password
- Open ToolCrix Password Generator.
- Set length to at least 16 characters (20+ for important accounts).
- Enable uppercase, numbers and symbols if required.
- Use pronounceable mode if you need to type it from memory.
- Store in a password manager — never reuse passwords.
Frequently Asked Questions
Is the password generated on my device?
Yes. Uses the browser's crypto.getRandomValues() API — never contacts a server.
Should I include symbols?
Only if required. Length adds much more entropy than symbols. A 20-char lowercase password is stronger than a 12-char mixed one.