Home » Play Games » Password Chaos

In this guide

• How to play Password Chaos
• The three modes
• The 28 rules, family by family
• The five rules that end runs
• Strategy that finishes stacks
• Questions and answers

How to play Password Chaos

Press Play and start typing in the field. Rule 1 is already on screen: your password must be at least 8 characters long. The moment it passes, its card turns green and Rule 2 slides in underneath the newest-first stack. Satisfy Rule 2 and Rule 3 appears. That is the whole loop, and it would be a relaxing little typing toy if the rules retired once passed. They do not. Every rule stays live for the whole run, checked again on every keystroke, and the later rules were chosen by a designer with a grudge: they reach back into your password and break the early ones.

A card with a tick is passing. A card with a cross is failing, and it unfolds a hint written in plain words: what the rule wants, and usually the trick that makes it easy. If several cards are red and you cannot see which one to fix first, press the Stuck button below the stage. The game scrolls to your first failing rule and reads its hint out in the message line. It never types for you. The password is yours; the game just points at the fire.

You win a Classic run when all 28 cards are green at the same moment, and the clock stops. Your winning password is shown on the victory panel, mostly so you can admire the absurd string you have built: part word salad, part arithmetic, part chemistry homework, with one emoji standing in it like a flag. Your best Classic time is kept on the purple bar at the top of the page, and a run in progress is saved on your device, so closing the tab mid-stack is not the disaster it feels like. Come back and the chaos is restored exactly where you left it.

The three modes

Classic is the main event: the full 28-rule stack, with its targets rolled fresh for every run. The digit sum you must hit, the Roman total, the chemistry range and the banned letter all change, so a password that won yesterday will not win today. Classic is timed, and the honest way to play it is to chase your own best time on the purple bar.

Daily Remix is the social stack. Every day, a seeded draw picks 14 rules from the Classic 28, deals them in their usual order with targets rolled from the date, and closes the stack with the own-length rule, for 15 rules in total. Everyone who plays that day gets the same 15 rules and the same targets, which makes it the one mode where you can fairly race a friend. Clear it on back-to-back days and your streak grows; miss a day and the streak politely resets.

Endless is for players who finish Classic and ask what rule 29 would have been. The Classic stack plays out as normal, and then a generator keeps dealing new rules: longer minimum lengths, specific animals, colours and countries named on demand, extra digit counts, new product divisors, fresh banned letters and shapes. There is no final rule and no victory panel. Your score is simply how many rules you bank before you give up, and your best depth is remembered.

The 28 rules, family by family

The stack is built in families, and each family teaches one skill. The basics arrive first and never stop mattering. The word rules reward a password built from real words rather than random letters. The number rules turn your digits into a small arithmetic puzzle that has to be rebalanced every time a new digit sneaks in. The capital rules are the quiet trap of the whole game, because capitals are never just capitals here. And the endgame rules are pure juggling: constraints on the shape of the string itself.

Family	Rules	What it tests	House trick
The basics	1 to 4	Length, a capital, two digits, one symbol.	One capitalised colour word covers two rules at once.
Words inside words	5, 7, 8, 10, 16, 17, 18, 21, 26	A month, a colour, a planet, a chess piece, a country, today, a greeting, a spelled-out number, an animal.	Real words in lowercase pass quietly and hide nothing.
Number trouble	11, 12, 13, 14, 15, 22	A leap year, one exact sum typed verbatim, a digit total, a digit product, a prime vowel count, an even digit count.	The year 2000 adds almost nothing to any total.
Capitals are traps	6, 19, 20	Roman numerals multiplying together, chemical symbols adding up, a US state code.	Spend capitals like coins: few, deliberate, counted twice.
The endgame	23, 24, 25, 27, 28	A banned letter, a triple letter, exactly one emoji, a digit at the very end, and the password containing its own length.	Build the endgame first in your head; it constrains everything.

Two families deserve a slower look. Number trouble is where most of the rebalancing happens. Your leap year is four digits, your exact sum is three or four more, and every one of them counts toward the digit total and the digit product. Pick greedy digits early and the totals become a wrestling match; pick small digits and the totals stay steerable with a nudge or two at the end. The vowel rule sits in this family too, quietly counting a, e, i, o and u across every word you add, which is why a late country name can break a rule you passed ten minutes ago.

Capitals are traps because this game reads them twice. A capital letter can open a chemical symbol: Fe is iron, Au is gold, and the game adds the atomic numbers of every symbol it finds, greedily, from left to right. The same capital can be a Roman numeral: M is a thousand, C is a hundred, and every numeral hiding in your password multiplies into one total that must land exactly on target. A friendly capitalised word like Mars is, to this game, a thousand points of Roman trouble wearing a planet costume. Lowercase words hide neither symbols nor numerals, which is the single most useful fact in this guide.

The five rules that end runs

Rule 13, the digit sum, ends more runs than any other. The total must be exact, and it counts digits you added for completely different reasons: the year, the typed sum, even the length number waiting at the end. The fix is to think of your digit budget as one account. A leap year like 2000 spends only 2 from it. Small filler digits spend exactly what they say. And because the total is checked live, you can watch the account move as you type and correct it with a single digit swap instead of a rebuild.

Rule 14, the digit product, looks worse and is secretly kind. Multiply every digit together and the answer must divide evenly by a target like 6, 8 or 12. Long passwords make enormous products, and chasing factors feels hopeless until you remember the zero trick: any single zero digit makes the entire product zero, and zero divides evenly by everything. Your leap year probably brought three zeroes with it. Rule 14 is often already green before you notice it exists.

Rule 6, the Roman product, ends runs by stealth. The total must be exact, and the trap is that numerals hide inside ordinary capitals: a state code, a capitalised greeting, the first letter of a sentence-case word. Players fix it by auditing every capital in the string, one by one, and keeping exactly one clean numeral that makes the target on its own. Rule 19, the chemistry range, is its kinder sibling: the window is wide, forty numbers across, and one well-chosen symbol like Fe or Sn usually lands it in a single move.

Rule 23, the banned letter, punishes vocabulary habits. One letter, drawn from the quiet end of the alphabet, is simply not allowed, in either case, anywhere, including inside longer words. It arrives late, when your password is full of words you chose an hour of rules ago, and the fix is substitution: swap the month, pick a different animal, re-pad with clean consonants. Rule 28 is the final boss and gets its own paragraph below, in the strategy section, because beating it is mostly planning.

Strategy that finishes stacks

Build from small, swappable pieces. A winning password is not one long clever word; it is a row of short modules, a colour, a month, a planet, a chess piece, a country, each doing one job, each easy to replace when a later rule objects to it. When the banned letter lands in the middle of your month, you want to swap one module, not perform surgery on the whole string. Keep the modules lowercase, keep the digits small, and keep one capitalised word only, chosen early, doing double duty for the capital rule and a word rule at the same time.

Feed the digit rules in the right order. The year is the biggest single digit decision in the game, so make it the cheapest: 2000 is a leap year with a digit sum of 2 and a product of zero, and it quietly passes the product rule on its own. Type the exact sum exactly as shown, without spaces, and let it be. Then steer the digit total with filler digits at the end of the string, where they disturb nothing else, and remember the digit count must end up even, so add filler in pairs when you can.

Plan the endgame before it arrives. The last five rules are all about shape: a banned letter, three identical letters in a row, exactly one emoji, a digit in the final position, and the length of the whole password written inside it as a number. The length rule is the one to rehearse: adding the number changes the length, which changes the number. The landing technique is to leave a small pad of spare letters near the end. Write the length you are aiming for, count, then grow or trim the pad by a letter or two until the number inside and the true length agree. It feels like landing a plane, and the first time it clicks, the whole stack turns green at once.

Finally, use the tools the game gives you. The hint on a red card is specific to that rule and usually names the trick outright. The Stuck button finds your first failing rule when the stack is too tall to scan. Give Up costs nothing but pride, and a fresh run deals fresh targets, which is sometimes the fastest route past a cruel digit sum. And if Classic ever feels solved, Endless is waiting with rule 29, and rule 30, and a generator that has never once run out of ideas.

Questions and answers

Is Password Chaos free to play here?

Yes. Password Chaos is completely free to play in your browser. There is no download, no sign-up and no limit on runs. Your best times, your Daily streak and any run in progress are saved on your own device only, and the password you invent is checked on this page and never sent anywhere.

How do you win a game of Password Chaos?

Keep every rule green at the same time. Rules unlock one at a time as you type, and in Classic mode the run ends when all 28 rules pass together. The final rule asks your password to contain its own length written as a number, so leave a little room at the end to land it.

What is the Daily Remix?

The Daily Remix is a shorter stack of 15 rules, seeded by the date so every player gets the same rules and the same targets on the same day. Fourteen rules are drawn from the Classic stack and the own-length rule always closes the day. Finish it on back-to-back days to grow your streak.

How do the Roman numeral and chemistry rules work?

Capitals are dangerous in this game. Every capital letter can hide a Roman numeral, and all the numerals in your password multiply together. Capitals also start chemical symbols, whose atomic numbers are added up. Lowercase words hide neither, which is why most of your password should stay lowercase, with capitals spent carefully and counted twice.

Is the password I type stored or sent anywhere?

No. The game runs entirely on this page, in your browser. The checks happen on your device, nothing is uploaded, and the only thing saved is your progress: best times, streaks and the run you are in the middle of. Even so, never type a real password you use anywhere else. Invent a fresh one for the game.

What is the best strategy for the hard rules?

Feed the stack small, steerable pieces. Choose a leap year with a tiny digit sum, like 2000, so the sum rule stays easy to steer. Remember that one zero digit makes a whole digit product zero, which passes any divide-evenly rule. Save the emoji and the final length number for last, and use the Stuck button whenever a card turns red and you cannot see why.

Last updated: November 8, 2026