Is a 16-Character Password Strong Enough?
A 16-character password is strong enough for virtually all personal and professional use. At about 105 bits of entropy, it would take billions of years to crack with current technology. NIST and CISA recommend 16 characters as the standard for high-value accounts.
| Length | Entropy | Estimated Crack Time |
|---|---|---|
| 16 characters | ~105 bits | billions of years |
Do not copy a 16-character example from the internet
Any password printed on a website, including this one, is already public. Use the generator above to make a new 16-character password in your browser.
When to Use a 16-Character Password
Use 16-character passwords as your standard for all accounts—email, banking, work, and password managers. It is the recommended minimum for high-value and privileged accounts.
How to Generate a Strong 16-Character Password
Click Generate above. This page is set to 16 characters. A password printed on a website is already public, so this page does not list samples you can copy. Make a new one here, then save it in a password manager.