Password Generator
Generate a random password in your browser with crypto.getRandomValues. Nothing is stored.
Estimate a typed password from the character types it uses. The password stays in this tab and is not checked against a breach list.
A password strength checker estimates bits from the length and the character types actually present. It does not upload the password or compare it with a breach list.
This tool runs in your browser. Inputs, files and generated values stay on this device. Favorites and recently used tools, if you use them, store only tool names in local storage — never passwords, documents or QR contents. See the privacy policy.
Type a password and see a Short, Moderate, or Strong rating. The estimate uses the length and the character types that appear in it. It does not look up breaches, and it does not know whether a site will accept the password.
password is 8 characters of lowercase letters. The pool is 26, the estimate rounds to 38 bits, and the rating is Short.
Abcdefghijklm12! is 16 characters with uppercase, lowercase, numbers, and a symbol. The pool is 85, the estimate rounds to 103 bits, and the rating is Strong.
Bits are the length times the base-2 log of the pool. The pool is 26 for uppercase if an A through Z appears, 26 for lowercase, 10 for a digit, and 23 for a symbol in !@#$%^&*()-_=+[]{};:,.?. A character outside those sets is not treated as the whole symbol set. It adds one. This is not the password generator, which rates a password from the types you selected before it was created.
Up to 256 characters. The page does not look up breaches, and it does not know whether a site will accept the password. Accented letters count as other characters, not as A through Z.
See the disclaimer for what these tools do not cover.
Generate a random password in your browser with crypto.getRandomValues. Nothing is stored.
Create a SHA-256, SHA-384, or SHA-512 digest of text in your browser. This is a hash, not encryption.
Generate one or many UUID v4 values in your browser using a secure random source.
Add utm_source, utm_medium, and utm_campaign to a link. Term and content are optional. Blank fields are omitted, and this page does not record a visit.
Turn a title into a lowercase, hyphenated permalink. Latin accents are removed, while letters such as 你好 stay. It does not check that the address is unused.
Create a QR code from text or a URL in your browser, then download a PNG.
The rating uses the character types in the password you type. It stays in this tab. It is not uploaded and it is not compared with a breach list.