Can I generate passwords in bulk or download a list?

Set Batch count from 1 to 100. Each password or passphrase is drawn independently using the settings on screen; repeats are possible. Copy batch puts one value per line on the clipboard, and Download TXT exports the same list with a final newline. Generated batches and the last five main values remain in this page only. A clipboard or downloaded file is a copy you choose to keep, so handle it like other credentials.

How do I generate an alphanumeric password without symbols?

The alphanumeric page starts with lowercase letters, uppercase letters and digits, with punctuation disabled. On any page you can switch the four sets independently, set 4 to 128 characters and exclude 0, O, 1, l, I and the pipe. When several sets are enabled, each output includes at least one character from each. Digits-only output can begin with zero; it is text, rather than a numeric calculation.

Can I generate an 8, 12, 16 or 32 character password?

Yes. Use the Length box for any whole length from 4 to 128. The quick choices are 8, 12, 16 and 24. A fixed length alone is not a strength promise: the alphabet, random generation, the receiving site and how the credential is stored all matter. A name or phrase you choose yourself is not the same random process.

What does the entropy number mean?

For passwords it is the base-2 logarithm of the permitted output space, accounting for the rule that every enabled character set appears. Sixteen characters with all four sets is about 105 bits. For passphrases it describes the random word choices: each of the 2,048 words contributes 11 bits, and a random final digit adds log2(10), about 3.3 bits. Without a non-letter separator or capitalised boundaries, different word sequences can join to the same text, so that choice entropy is an upper bound for the final string. Strength labels are choice-space bands, not a measured cracking time or an audit of an existing password.

Is this Diceware, an EFF word list or a wallet recovery phrase generator?

This uses a bundled 2,048-word English list and the browser random generator. It does not roll physical dice, use the original Diceware or EFF lists, implement BIP39/checksum rules, or recover a cryptocurrency wallet. The supported word count is 2 to 12. Ordinary passphrases are separate from 12 or 24-word wallet recovery phrases.

Can I supply my own words, get one pronounceable word, or choose another language?

Switch to Passphrase and choose Your word list to draw from words you supply. Paste at least two distinct A–Z words, separated by spaces, commas or new lines. Case is normalized and duplicates are removed before choices are counted. Choose 2 to 12 words per phrase, a separator, capitalization and an optional random final digit. The list stays in page memory and is not saved. This does not mutate a single supplied name, synthesize a pronounceable single word, enforce a final character length or provide a translated dictionary.

Does it create accounts, app passwords, Wi-Fi QR codes or hashes?

It creates plaintext passwords or passphrases. It does not register an email or game account, create an app-specific credential issued by a provider, derive an encryption key, or bypass an existing password. Bcrypt Generator hashes a supplied password; Username Generator suggests handles; Wi-Fi QR Code Generator encodes supplied network credentials. Those are separate jobs.

Are generated values saved or sent anywhere?

Generation runs in this browser. Generated values and supplied word lists are not uploaded, included in analytics events, put in links or saved to local storage. Valid settings you explicitly change are remembered when storage is available; opening a preset page does not overwrite unrelated remembered settings. History, batches and supplied lists disappear on reload. Copy and TXT downloads are deliberate exports you control.

Can I use only letters, only digits or only non-alphanumeric symbols?

In Password mode, toggle the four Include sets independently. For letters-only, turn digits and symbols off; for digits-only, leave only 0–9 on; for punctuation-only, leave only symbols on. Digits-only values can start with zero. Alphanumeric means letters and digits without punctuation; non-alphanumeric means punctuation here. Outputs use printable ASCII and contain no spaces. When several sets are on, each output contains a character from every enabled set.

Can I generate readable or memorable phrases like the XKCD idea?

Choose Passphrase with Bundled words for random whole English words, then choose the count and a separator. Four bundled words make 44 bits of word-choice entropy; six make 66. Your word list can use supplied ASCII-letter words instead, with the smaller or larger actual choice space shown. This is random-word construction, not a promise that every phrase is memorable or a reproduction of XKPasswd or a named Diceware/EFF list.

Can a passphrase have exactly 12, 15 or 16 characters?

The phrase control counts words, not characters. Word lengths and separators vary, so it does not constrain the final character count. Password mode instead enforces a supplied 4–128 character length. A 12-word passphrase is also separate from a 12-character password and from a wallet’s 12-word recovery phrase.

Are batch passwords unique, temporary or automatically usable in an account?

Each value is an independent random draw with replacement, so repeats are possible. The page does not certify uniqueness across a batch or prior use, set an expiry, create accounts or activate credentials. A password takes effect only when accepted and saved through the receiving service.

Does this include a native app, extension, Linux command or source-code generator?

This is a browser utility. It does not install an app or extension, integrate with a password manager, or generate Python, PowerShell, C#, Bash or Excel code. A browser visit can generate plaintext values, but it does not fulfill a platform-specific programming or account-provider workflow.

Password Generator

Generate random character passwords or word passphrases locally, one at a time or in batches of up to 100. Choose 4 to 128 characters and their letter/digit/symbol sets, or 2 to 12 words from the bundled English list or a list you supply. The readout counts random choices in bits; it does not predict cracking time or check a receiving site’s policy. Copy individual values, copy a batch or download TXT. Valid settings can be remembered, while supplied lists and generated values stay in page memory until you choose an export.

ReadyYour password appears here

Drawn in this tab the moment the page is ready

Type

Length

Include

Entropy: waiting

Strength: waiting

Pool: 94 characters

Look-alikes

Batch count

The length box takes any number from 4 to 128, so an 8, a 12 or a 16 character rule is one keystroke away. Turning a set off drops it from the pool and lowers the entropy shown; excluding look-alikes removes 6 characters (0 O 1 l I |) for a password you have to read off a screen and type somewhere else.

Made here, kept here. Every character is drawn from crypto.getRandomValues on your own device by rejection sampling, so no position in the alphabet is favoured. The result is not sent anywhere, does not enter an analytics event and is never written into a link, and the only thing this page remembers between visits is your settings. A supplied word list stays in page memory and is never saved. It cannot know the rules a particular site enforces, so check its length limit and which symbols it accepts before you save one.

Accuracy. Passwords and passphrases come from the browser's own cryptographic randomness, made on your device and never sent anywhere. Entropy describes the random choices, not a cracking-time prediction. It cannot know a site's own password rules.

Password and passphrase settings

Job	Setting	What changes
Alphanumeric	Letters and digits; symbols off	No punctuation in character passwords
Fixed character length	4–128 characters	Includes each enabled character set
Random English words	2–12 words from 2,048	11 bits per word choice
Bulk list	1–100 values	Independent draws; duplicates possible
Readable transcription	Exclude 0 O 1 l I \|	Smaller alphabet
Unambiguous word joins	Non-letter separator or capitalised words	Keeps word boundaries visible
Supplied word list	At least two distinct A–Z words;2–12draws	Case/duplicates normalized;actual list choices counted;list not saved

Common questions

Can I generate passwords in bulk or download a list?: Set Batch count from 1 to 100. Each password or passphrase is drawn independently using the settings on screen; repeats are possible. Copy batch puts one value per line on the clipboard, and Download TXT exports the same list with a final newline. Generated batches and the last five main values remain in this page only. A clipboard or downloaded file is a copy you choose to keep, so handle it like other credentials.
How do I generate an alphanumeric password without symbols?: The alphanumeric page starts with lowercase letters, uppercase letters and digits, with punctuation disabled. On any page you can switch the four sets independently, set 4 to 128 characters and exclude 0, O, 1, l, I and the pipe. When several sets are enabled, each output includes at least one character from each. Digits-only output can begin with zero; it is text, rather than a numeric calculation.
Can I generate an 8, 12, 16 or 32 character password?: Yes. Use the Length box for any whole length from 4 to 128. The quick choices are 8, 12, 16 and 24. A fixed length alone is not a strength promise: the alphabet, random generation, the receiving site and how the credential is stored all matter. A name or phrase you choose yourself is not the same random process.
What does the entropy number mean?: For passwords it is the base-2 logarithm of the permitted output space, accounting for the rule that every enabled character set appears. Sixteen characters with all four sets is about 105 bits. For passphrases it describes the random word choices: each of the 2,048 words contributes 11 bits, and a random final digit adds log2(10), about 3.3 bits. Without a non-letter separator or capitalised boundaries, different word sequences can join to the same text, so that choice entropy is an upper bound for the final string. Strength labels are choice-space bands, not a measured cracking time or an audit of an existing password.
Is this Diceware, an EFF word list or a wallet recovery phrase generator?: This uses a bundled 2,048-word English list and the browser random generator. It does not roll physical dice, use the original Diceware or EFF lists, implement BIP39/checksum rules, or recover a cryptocurrency wallet. The supported word count is 2 to 12. Ordinary passphrases are separate from 12 or 24-word wallet recovery phrases.
Can I supply my own words, get one pronounceable word, or choose another language?: Switch to Passphrase and choose Your word list to draw from words you supply. Paste at least two distinct A–Z words, separated by spaces, commas or new lines. Case is normalized and duplicates are removed before choices are counted. Choose 2 to 12 words per phrase, a separator, capitalization and an optional random final digit. The list stays in page memory and is not saved. This does not mutate a single supplied name, synthesize a pronounceable single word, enforce a final character length or provide a translated dictionary.
Does it create accounts, app passwords, Wi-Fi QR codes or hashes?: It creates plaintext passwords or passphrases. It does not register an email or game account, create an app-specific credential issued by a provider, derive an encryption key, or bypass an existing password. Bcrypt Generator hashes a supplied password; Username Generator suggests handles; Wi-Fi QR Code Generator encodes supplied network credentials. Those are separate jobs.
Are generated values saved or sent anywhere?: Generation runs in this browser. Generated values and supplied word lists are not uploaded, included in analytics events, put in links or saved to local storage. Valid settings you explicitly change are remembered when storage is available; opening a preset page does not overwrite unrelated remembered settings. History, batches and supplied lists disappear on reload. Copy and TXT downloads are deliberate exports you control.
Can I use only letters, only digits or only non-alphanumeric symbols?: In Password mode, toggle the four Include sets independently. For letters-only, turn digits and symbols off; for digits-only, leave only 0–9 on; for punctuation-only, leave only symbols on. Digits-only values can start with zero. Alphanumeric means letters and digits without punctuation; non-alphanumeric means punctuation here. Outputs use printable ASCII and contain no spaces. When several sets are on, each output contains a character from every enabled set.
Can I generate readable or memorable phrases like the XKCD idea?: Choose Passphrase with Bundled words for random whole English words, then choose the count and a separator. Four bundled words make 44 bits of word-choice entropy; six make 66. Your word list can use supplied ASCII-letter words instead, with the smaller or larger actual choice space shown. This is random-word construction, not a promise that every phrase is memorable or a reproduction of XKPasswd or a named Diceware/EFF list.
Can a passphrase have exactly 12, 15 or 16 characters?: The phrase control counts words, not characters. Word lengths and separators vary, so it does not constrain the final character count. Password mode instead enforces a supplied 4–128 character length. A 12-word passphrase is also separate from a 12-character password and from a wallet’s 12-word recovery phrase.
Are batch passwords unique, temporary or automatically usable in an account?: Each value is an independent random draw with replacement, so repeats are possible. The page does not certify uniqueness across a batch or prior use, set an expiry, create accounts or activate credentials. A password takes effect only when accepted and saved through the receiving service.
Does this include a native app, extension, Linux command or source-code generator?: This is a browser utility. It does not install an app or extension, integrate with a password manager, or generate Python, PowerShell, C#, Bash or Excel code. A browser visit can generate plaintext values, but it does not fulfill a platform-specific programming or account-provider workflow.

Passwords and passphrases come from the browser's own cryptographic randomness, made on your device and never sent anywhere. Entropy describes the random choices, not a cracking-time prediction. It cannot know a site's own password rules.