InTab

Password Generator

Generate strong random passwords, passphrases and PINs.

Crypto & Generators: Hashes, secrets and random data. It runs in your browser, so nothing you enter is uploaded.

What it does

The Password Generator creates strong random passwords, memorable passphrases and numeric PINs using your browser's secure random number generator. It shows the strength in bits of entropy and a rough time to crack, and can make up to 100 at once.

How to use it

  1. Choose Password, Passphrase or PIN.
  2. Set the length (4–128 characters), the number of words (3–12) or the number of digits (4–12).
  3. For passwords, choose the character types, edit the Symbol set, and tick Exclude ambiguous (Il1O0o) for passwords people have to read or type.
  4. For passphrases, choose the Separator and whether to capitalise words or add a number.
  5. Set How many, click Generate, then copy one or Copy all.

Examples

Type Example Strength
Password, 16 characters, all types t7#Qm!vR2x@Lp9&z about 104 bits
Passphrase, 5 words Lamp-Quiz-Tidy-Moon-Gold about 46 bits
PIN, 6 digits 482913 about 20 bits

Good to know

  • Length beats complexity: each extra character or word adds much more strength than swapping a letter for a symbol.
  • Use a different password for every account, kept in a password manager.
  • Passphrases are easier to type and remember. Use six or more words for an important account.
  • Nothing is saved or sent: close the page and the passwords are gone, so copy them first.

FAQ

How random are the passwords? They use crypto.getRandomValues, the same cryptographically secure source browsers use for encryption keys.

What does "bits of entropy" mean? How many guesses an attacker needs in the worst case: each extra bit doubles it. Around 80 bits or more is very strong for a password manager entry.

Guides

More Crypto & Generators tools

  • PASETO Tokens: Create and verify PASETO v4 tokens: v4.local (encrypted) and v4.public (Ed25519 signed).
  • Encrypt / Decrypt: AES-GCM, CBC and CTR text encryption with a password (PBKDF2) or a raw key.
  • Password Hasher: Hash and verify passwords with Argon2id, bcrypt, scrypt or PBKDF2 (OWASP defaults).
  • Hash Generator: MD5, SHA-1, SHA-2, SHA-3, BLAKE, CRC32, xxHash and HMAC for text or files.
  • Bcrypt: Hash passwords with bcrypt and verify hashes.
  • UUID Generator: Generate UUID v4 / v7 in bulk and inspect UUIDs.
  • Lorem Ipsum: Generate placeholder paragraphs, sentences or words.