Password Generator
Generates secure random passwords. You can edit the generated password, measure its strength, and check whether it appears in known data breaches.
What it does
Use this to create strong passwords for new accounts, see how strong a password you typed yourself is, or check whether your password appears in known data breaches.
How to use
There is a single screen:
- Set the generation options: length, character types, passphrase mode.
- Click Generate, the password appears in the top field.
- The password field is editable. You can change what was generated, or type your own password. The strength meter updates instantly.
- Use Check for breaches to query whether the password appears in known data breaches.
Generation options
| Option | Description |
|---|---|
| Length | Number of characters in the generated password. |
| Uppercase (A-Z) | On/off. |
| Lowercase (a-z) | On/off. |
| Digits (0-9) | On/off. |
| Symbols (! @ # $ % etc.) | On/off. |
| Passphrase | Multiple words instead of random characters (correct-horse-battery-staple). Easier to remember. |
Strength meter and breach checking
- Entropy (bits): Mathematical strength of the password. 80+ bits is considered safe.
- Crack time: Estimated time to break the password on a modern GPU.
- Strength meter: Updates instantly on every change you make in the password field, shown with a colour code (red weak, green excellent).
- Breach check: Shows whether the password appears in known data breaches (Have I Been Pwned). The full password is never sent, only the first 5 chars of its SHA1 hash are queried (k-anonymity).
Examples
Generate a new email password: Length 16, all character types on, Generate. The strength meter shows green.
An easy-to-remember password: Turn on passphrase mode, Generate. You get a password made of several words.
Audit your own password: Type your password into the field, watch the strength meter, click Check for breaches.
Watch out
- Generation is cryptographically secure (Python
secretsmodule), not predictable. - The breach check never sends your full password, only the first 5 chars of its SHA1 hash are queried.
- Short passwords (under 8) do not withstand modern attacks.
- Generated passwords are not saved in history, closing the screen loses them. Copy them somewhere safe right away.
License
Productivity tool; unlimited on every plan, including the Free tier.