Our mission
password-generator.com exists to make strong, unique passwords effortless for everyone. Weak and reused passwords remain one of the most common ways accounts are compromised, and the fix — a random password for every account — should take one click, not a tutorial.
How the tools work
- Everything runs in your browser. Passwords, passphrases, PINs, hashes, bcrypt hashes, TOTP codes and Wi-Fi QR codes are all computed on your device in JavaScript.
- Cryptographically secure randomness. All random choices use the Web Crypto API (
crypto.getRandomValues) with rejection sampling for an exactly uniform distribution. - No third-party code. The site loads no analytics, ad, font or CDN scripts. A strict Content Security Policy enforces this.
- Open, standard algorithms. Diceware passphrases use the EFF long wordlist; TOTP follows RFC 6238; bcrypt uses the widely reviewed bcrypt.js library.
Editorial standards
Our guides follow current, authoritative guidance — chiefly NIST Special Publication 800-63B Revision 4 and the OWASP cheat sheets — and every figure on the site (entropy, crack times, combinations) is calculated from stated assumptions rather than copied from elsewhere. Pages show the date they were last reviewed. If you spot an error, please tell us and we will correct it.
Desktop software
We also offer SoftFuse Password Generator Free, a small Windows program for generating passwords offline.
Contact
Email support@password-generator.com.
Last updated: · Reviewed by the Password Generator team