Dev Tools, 7 tools

Converters, 4 tools

Text Tools, 5 tools

Color Tools, 2 tools

Generators, 3 tools

Image Tools, 4 tools

PDF Tools, 6 tools

Calculators, 4 tools

Open tools · 0

About

Password Generator

A new password is ready as the window opens, and changing anything makes the next one. Every one is drawn from your browser’s cryptographic random generator, without the bias a quick implementation introduces, and its strength is stated honestly: the exact number of bits for the options you chose, and how long a rack of graphics cards would take to guess it.

What it does

  • Random passwords of 4 to 128 characters from capitals, lower case, digits and symbols, the symbols a list you can edit.
  • Look-alikes (I, l, 1, O, 0) left out on request, at least one of every kind, or a letter first where a site insists.
  • Passphrases of three to twelve words from the Electronic Frontier Foundation’s long list of 7,776, with your choice of separator, capitals and a digit.
  • PINs of three to twelve digits that skip the ones everybody tries first: 0000, 1234, 9876.
  • Entropy in bits, exact for the options chosen, and the time to guess against a careless and a careful stored hash.
  • Up to fifty at a time, copied or downloaded; the ones you copied kept in a short list for the visit.

How to use it

  1. Choose a random password, a passphrase or a PIN.
  2. Set the length and the kinds of character, or the number of words.
  3. Copy the one you want, or make fifty and download the list.

What it does not do

  • Checking the strength of a password you type: that asks people to type their real passwords into a website, which nobody should.
  • Saving anything: that is a password manager’s job.

Questions

Is it safe to make a password on a website?

Here, yes. The password is made by your browser’s own random generator on your device, and it is never sent anywhere, logged or stored.

Passphrase or password?

Five random words from the list give about 64 bits, more than most passwords of eight to ten characters, and they are easier to type on a phone. Use a passphrase where you will type it, and a random password where a manager fills it in.

What is modulo bias?

Taking a random number modulo the size of the character set favours the first characters whenever the set does not divide the random range evenly. This generator throws the uneven tail away, so every character is equally likely.

Why is the time to crack shown twice?

A site that stores passwords carelessly, with a fast hash and no salt, can be attacked at billions of guesses a second; one that uses bcrypt or argon2, at thousands. You do not know which kind the site is, so both are shown.

Everything here runs in your browser. Nothing you type, paste or open is uploaded, and there is no account and no queue. How that works.

For one job

Often used with

More in Generators

  • UUID Generator: Generate UUIDs one at a time or a thousand: v4, time-ordered v7, v1, name-based v5 and v3, plus ULIDs and Nano IDs; inspect any UUID.

All toolsAbout utilbrewPrivacy