Browser 106

no file limit

Inspector security/password-generator

Secure Password Generator

Overview

This generator produces five passwords at a time rather than one, so you can pick a password you can live with instead of pressing regenerate until something readable appears. You set the length and which of uppercase, lowercase, digits and symbols to draw from, and can exclude look-alike characters — the l/1/I and O/0 confusions — which matters for anything that will be read aloud or typed off paper. Every password carries its own entropy in bits, measured from the settings that produced it: a number you can hold against a policy, rather than a colour or the word 'strong'. Characters come from crypto.getRandomValues(), your browser's cryptographic random source, and the passwords are never sent anywhere, never stored and gone when the tab closes. There is no account to create and nothing to install.

New Account SignupProduce a unique password before creating an account, so nothing is reused from a service that may later be breached.
Seeding a Password ManagerGenerate high-entropy passwords to paste into Bitwarden, 1Password or KeePass, without an online service having seen the raw output.
Initial Credentials for Accounts You ManageCreate starting passwords for new user or service accounts, toggling symbol sets on or off to match whatever the target system will actually accept.
Meeting a Written PolicyA policy that asks for a minimum number of entropy bits can be checked directly: the figure is shown beside each password, so you can raise the length until it clears the bar.
Application SecretsGenerate random strings for environment variables, signing secrets or API keys without reaching for server-side tooling or an online generator.

Set

Security Tools 26

Neighbours

01 AES File & Text Encryptor 02 Base64 Decode 03 Base64 Encode 04 CSR Generator 05 DER to PEM Converter 06 Hash Generator

Specification

Command: security.password_generator
Set: Security
Input: text
Output: PLAIN
Max file: 0
Batch: single file

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

The file is opened, worked on and written back inside this tab. No upload step exists in this tool — there is nowhere for the bytes to go.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Set the length and the character classes

Choose how long the password should be and which of uppercase, lowercase, digits and symbols to draw from. Look-alike characters can be left out, which matters for anything that will be read aloud or typed off paper.

Get five at once

Five passwords are generated together, so you can pick one you can live with instead of pressing regenerate until something readable appears. Each is drawn from your browser's cryptographic random source and is never sent anywhere.

Read the entropy, not a colour

Every password carries its own entropy in bits, measured from the settings that produced it — a number you can hold against a policy, rather than a word like 'strong'.

Frequently asked

How random are the generated passwords?

Each character is drawn with crypto.getRandomValues(), the browser's cryptographic random source, and the draw is unbiased — no modulo shortcut that would make some characters slightly likelier than others. That is the same class of source security software uses.

Are my passwords stored or transmitted?

No. Generation happens in your browser. Nothing is sent to a server, written to storage or logged, and the five passwords are gone once you close the tab.

What makes a password strong?

Length and randomness, in that order — a long password from a smaller character set beats a short one full of symbols. Each password here shows its entropy in bits, computed from the length and the character sets that produced it, which is the number to hold against a policy rather than a word like 'strong'.

How long should my password be?

Twelve characters is a reasonable floor for an ordinary account and sixteen or more for anything that matters, but read the entropy rather than the length: dropping symbols or excluding look-alike characters shrinks the alphabet, and the bits figure accounts for that where a character count does not.

Should I use symbols in my passwords?

They add entropy per character, so yes where they are accepted. Some systems silently reject or truncate certain symbols, and a password you have to read aloud or type from paper is easier without them — which is what the option to exclude look-alike characters is for.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

Related · Security Tools