About
About Your Password Generator
Free password and security tools that run in your browser - built so that you can check what they do, not just trust it.
What This Site Is
Your Password Generator is a set of free tools for creating and checking passwords and other secrets. There are no accounts, no sign-up and no ads. Each tool works on its own page and does its work on your device.
The purpose is simple: make strong, random passwords easy to get, and explain the security behind them in plain language. The guides cover how passwords are attacked, stored and protected, with every technical claim linked to its source.
The Tools
Password tools
- Password Generator - Strong random passwords, 8-64 characters, in bulk.
- Passphrase Generator - Memorable passphrases from the EFF wordlist.
- Random PIN Generator - 4 and 6 digit PINs that avoid the most common codes.
- Password Strength Checker - Test a password against patterns and common passwords.
- Password Entropy Calculator - Entropy in bits and how long a password takes to crack.
- Password Requirements - Check a password against a service's published rules, then generate one that fits.
- WiFi Password Generator - Wi-Fi passwords and passphrases that every WPA2 and WPA3 router accepts.
Developer tools
- UUID Generator - Random version 4 UUIDs, one or a thousand at a time.
- Username Generator - Username ideas with your name or keywords, checked against platform rules.
- Random String Generator - Random strings from your own character set, without modulo bias.
- Hash Generator - MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of text or a file, side by side.
- SHA-256 Hash Generator - SHA-256 of text or a file, to check downloads and checksums.
- MD5 Hash Generator - MD5 of text or a file, to compare with a published MD5 checksum.
- Bcrypt Generator - bcrypt hashes with a chosen cost, and a check of a password against a hash.
- Htpasswd Generator - user:hash lines for Apache basic authentication, with bcrypt by default.
- TOTP Generator - Time-based one-time codes from a test secret, with a QR code and a code check.
- API Key Generator - Random API keys from 16-128 bytes, hex or base64url, with a prefix.
- JWT Secret Generator - Strong HMAC secrets for HS256, HS384 and HS512 signing.
All of them are listed on the Tools page.
How Password Generation Works
When you generate a password, passphrase or PIN, the page asks your browser for random numbers through crypto.getRandomValues(), the Web Crypto API's cryptographically secure random number generator. Each character, word or digit is chosen so that every option is exactly equally likely. If that API is not available, the generator refuses to run instead of falling back to a weaker source.
The password is created in the page and stays there. It is not sent to our server or to anyone else, and it is not saved in cookies or browser storage. The readable source code of the generators is published on this site, and How It Works explains how to verify all of this yourself - for example by going offline and generating more passwords.
A Privacy-First Approach
The safest data is data that is never collected. Whatever you generate or type stays in your browser and is never sent. The site uses analytics (Google Analytics) to measure page usage, but it only ever sees which pages are visited, never the values you create. The Content Security Policy allows scripts from this domain and Google and blocks every other third party, and wordlists, dictionaries and fonts are served from this domain. The privacy policy describes exactly what is and is not processed.
Basic Security Recommendations
- Use a unique password for every account. If one site is breached, attackers try the same email and password elsewhere. A unique password stops that at the first site.
- Use a password manager. It remembers long random passwords for you and fills them in on the website they belong to.
- Turn on multi-factor authentication (MFA) wherever it is offered, preferably with a security key, a passkey or an authenticator app. The 2FA guide compares the options.
Disclaimer
No password tool can guarantee complete security. A strong password does not protect an account against malware on your device, phishing, or a breach at the service itself. The information on this site is general security information, not professional security advice.