What will you find here?
Four focused reports: a sourced review of password policies across 100 services, plus calculated comparisons covering password search spaces, guessing-time estimates, and random EFF passphrases.
Which password statistics are available?
Website password requirements
Compare published password rules, breach screening, and passkey availability with source links for every service.
Open report → Calculated estimatesPassword guessing time
Compare search-time estimates under three clearly labeled guessing speeds.
Open report → Calculated comparisonRandom password length
Compare the lengths needed to reach the same estimated search space.
Open report → Calculated + full listRandom passphrase combinations
See EFF long-list combinations and word lengths.
Open report →Can you download the data?
Yes. Each report links to the JSON or CSV used to produce its figures.
How can you check the work?
The 100-service study file includes every observation, source, access date, account context, and unknown value. The separate calculation release lists every alphabet, password length, target, guessing speed, word count, formula, and result used in the other reports.
No passwords were collected or tested. The policy study used official public documentation and interfaces visible without creating or changing an account.
Where does the data come from?
- Official sources for all 100 services — the help pages and public interfaces used in the policy study.
- NIST SP 800-63B-4, Appendix A: Strength of Passwords — explains the limits of applying random-password calculations to passwords people choose themselves.
- EFF Long Wordlist for Passphrases — supplies the 7,776 words and dice codes used in the passphrase report.
The policy study reports public disclosures; the other three reports are calculations based on stated inputs. Each report labels which kind of evidence it uses.
How do we handle updates and corrections?
We review the release at least once a year and update it sooner when a source or calculation changes. Report an error through the publisher contact form; if a finding changes, we regenerate the data and record the correction here.
Generate My Password is published by United Internet Ventures LLC. Each report provides its own release ID and suggested citation.
2026-10-22 — Added the 100-service website password requirements study.
2026-10-21 — Initial calculation release.