Skip to content

A space we build together

MOA
Log in

Password Generator

Create a hard-to-guess password from a length and character types, or as an easy-to-remember word combination (passphrase). The result never leaves this page.

Style
Character types

Random values come only from the browser's cryptographic generator (Web Crypto). Nothing is sent or stored, and it disappears when you reload.

Generated passwords

Estimated strength: ( bits)

    How it works

    One character from each selected type is drawn first so every type is included, the rest are drawn from the full set, and the result is shuffled. Taking a random number modulo the set size would favor the first characters slightly, so values that would cause that bias are discarded and redrawn (rejection sampling).

    How is a word combination different?

    A passphrase such as "bagpipe-bamboo-cactus-lantern-pebble-tiger" strings together words picked at random from a list. It is weaker than random characters of the same length but far easier to remember, so the same strength is easier to keep in your head. Words are drawn with repetition allowed, so the strength is exactly log₂(list size) × word count. If you pick the words yourself or use lyrics or proverbs, that math no longer holds — always use the words the tool drew, unchanged.

    Using it safely

    Longer is stronger — going to 16+ characters helps more than adding symbols. Use a different password for every site and keep them in a password manager. Do not paste generated passwords into chat apps or notepads.

    FAQ

    Is the generated password stored on a server?

    No. Everything happens in your browser and nothing is transmitted.

    How is this different from Math.random?

    Math.random is not meant for cryptography and its output can be predicted. This tool uses only Web Crypto, which draws on operating-system randomness.

    What do the "bits" mean?

    The number of possible combinations expressed as a power of two. Each extra bit doubles the guesses needed. 80+ bits is plenty for most uses.

    A site rejects some symbols.

    Edit the "Symbols to use" field to keep only the allowed ones, or turn symbols off and increase the length.

    Is a word-combination password safe?

    Yes, if it has enough words: 6 words is about 62 bits and 8 words about 83. Do not swap or choose the words yourself, though — that breaks the math. Use them exactly as drawn.

    How to use this tool

    Generates a hard-to-guess value when you create an account or change a password. Pick a length and character types, or choose a memorable passphrase made of words. The value is created in this browser and is never sent to a server.

    Frequently asked questions

    Is the generated password stored or sent anywhere?

    No. It is created in your browser and never leaves this page.

    How long should a password be?

    Longer is safer. We suggest at least 12 characters mixing cases, digits and symbols, or a passphrase made of several words.

    What is a passphrase?

    A long password built from several words. It is easier to remember and harder to guess than a short string of symbols.

    See all tools

    Web Page & RSS Checker

    Enter an address and our server visits it to check titles, descriptions, Open Graph preview data, response headers, redirects and the SSL certificate expiry — inspect an RSS/Atom feed for common problems, or check whether an API allows browser requests from another site (CORS), and look up a domain's DNS records (A, MX, TXT, NS and more) through public DNS.

    Diagram Maker

    Draw flowcharts, sequence, ER and Gantt diagrams from text and save them as SVG or PNG (Mermaid syntax). Your text is never sent to a server.

    Developer Tools

    Forty everyday developer helpers in one place (including TOTP, semver, bit operations, .env/INI/TOML conversion, JSON Schema validation, docker run → compose, .gitignore, OG tags and ASCII/ANSI tables) (now with subnet/CIDR, chmod, an HTTP/MIME/port reference, robots/sitemap and dummy data): URL, Base64, HTML and Unicode encoding, JSON formatting, CSV and type generation, Unix time, JWT decoder, hashes, UUIDs, regex, text diff, number bases, cron, certificate/CSR and mail header readers, business registration number checks, and a table converter.

    Code Formatter (Beautifier)

    Tidy HTML, CSS, JS, JSON, PHP, Java, Kotlin, Shell, Python, SQL, XML and YAML with tabs or spaces (2, 4 or 8), then copy it or export it as colored HTML. Your code is never sent to the server.

    Code Minifier

    Remove comments and unnecessary whitespace from HTML, CSS, JS and JSON to cut file size. Paste code or open a file (drag and drop works), then copy the result or download a .min file. Your code is never sent to a server.

    JSON, XML & YAML Parser

    Paste or open a JSON, XML or YAML file to validate it (with the exact line and column of any error), browse it as a collapsible tree, search values and keys, look values up by path, pretty-print or minify it, and convert between formats. Everything runs in your browser — your input and files are never sent to a server.