Security
Generate strong, truly random passwords in bulk — without a single character leaving your browser.
Generation runs locally with a cryptographically secure RNG. Nothing is uploaded, logged, or stored.
Characters are drawn with crypto.getRandomValues using unbiased sampling — no modulo bias, no Math.random(). Each generated password is guaranteed to contain at least one character from every enabled set, then shuffled so the guaranteed characters never sit in predictable positions.
Need tokens for APIs instead? Try the Random Token Generator. Storing a hash of a user password? Use bcrypt or the htpasswd Generator.
Generate a fresh 16+ character password for every account instead of reusing one.
Create batches of random passwords for development environments and CI fixtures.
Decode JWT header and payload locally, then run security checks: weak algorithms, expiry, risky claims.
Generate cryptographically secure random tokens in hex, base64, or URL-safe base64.
Generate Apache/Nginx .htpasswd entries with bcrypt or {SHA} schemes — fully client-side.
Generate bcrypt password hashes with adjustable cost and verify hashes against passwords.
Looking for something else? Browse all tools