Simply secure passwords.
Pick a tool. Everything runs in your browser — nothing you type or generate is ever sent anywhere.
- Password GeneratorBuild a random password of any length from the character types you choose. Everything is generated on your device and never leaves your browser.Open
- Passphrase GeneratorCreate a strong passphrase you can actually remember. Words are picked randomly on your device and never leave your browser.Open
- XKCD Password GeneratorMake a password out of a few short everyday words, in the style xkcd made famous. The words are drawn on your device and never leave your browser.Open
- PIN GeneratorDraw a random numeric PIN for a phone, a card or a door lock. Every digit is drawn on your device and never leaves your browser.Open
- WiFi Password GeneratorCreate a strong WiFi password and a QR code guests can scan to join. Both are made on your device and never leave your browser.Open
- Username GeneratorMake up a username that gives nothing away about you, from ordinary words and a few numbers. It is put together on your device and never leaves your browser.Open
- Email Alias GeneratorMake a separate email address for every shop, newsletter and sign-up form, so you can see who leaked yours. Aliases are built on your device and never leave your browser.Open
- API Key GeneratorIssue a random API key in the format your service expects — hex, Base64, Base62 or Base32 — with an optional prefix in front. The key is drawn on your device and never leaves your browser.Open
- Session ID GeneratorDraw a random session ID in hex, Base64 or Base32, with enough randomness behind it that nobody can guess their way into another session. It is drawn on your device and never leaves your browser.Open
- CSRF Token GeneratorDraw a random CSRF token in hex or URL-safe Base64, so a form submitted from another site can be told apart from one of your own. It is drawn on your device and never leaves your browser.Open
- Secret Key GeneratorDraw a random secret key for signing JWTs, webhooks and anything else that uses HMAC, in Base64 or hex and the size your algorithm asks for. It is drawn on your device and never leaves your browser.Open
- OAuth PKCE GeneratorDraw a code verifier and work out the matching code challenge for an OAuth 2.0 sign-in, ready to paste into an authorization request. Both are made on your device and never leave your browser.Open
- TOTP Secret GeneratorCreate the shared secret behind a six-digit authenticator code, with a QR code any authenticator app can scan. Both are made on your device and never leave your browser.Open
- Backup Codes GeneratorMake a set of one-time codes that get you back into an account when your phone is gone, ready to print or save as a file. They are drawn on your device and never leave your browser.Open
- UUID GeneratorDraw one UUID or a hundred, as a random v4 or a time-ordered v7, in whichever case and shape your system expects. They are drawn on your device and never leave your browser.Open
- Nano ID GeneratorDraw short, URL-friendly identifiers at the length and alphabet you choose — a smaller UUID for links, filenames and database rows. They are drawn on your device and never leave your browser.Open
- Password Strength CheckerSee how strong a password you already have really is, and how long it would take to guess. It is checked on your device and never leaves your browser.Open
- Password Policy TesterCheck a password against a set of rules — a preset like NIST, or your own — and see exactly which ones it meets. It is tested on your device and never leaves your browser.Open
- Password Entropy CalculatorWork out how many bits of randomness a password holds, and see the arithmetic behind the number. It is calculated on your device and never leaves your browser.Open
Everything happens on your device. Nothing you type or generate leaves this browser.