Generate & Check
Secure Passwords
Create strong, cryptographically random passwords in seconds. Check if your password has appeared in a data breach, analyze its strength, and build memorable passphrases — all processed entirely in your browser. Nothing is ever stored or transmitted.
Uses the HaveIBeenPwned k-anonymity API — your actual password never leaves your browser.
How it works: Your password is hashed with SHA-1. Only the first 5 characters of that hash are sent to the API. The full hash and your password are never transmitted — this is called k-anonymity.
Type any word or phrase — converted into a stronger password using letter substitutions like a→@, o→0, i→!, e→3.
Substitution Map
Generates cryptographically random PINs of 4, 6, 8 and custom lengths. Useful for bank PINs, device lock codes and access codes.
Security note: All PINs are generated using crypto.getRandomValues() — the same cryptographic API used by your browser for secure operations. No patterns, no repetition.
How to Use
- Drag the slider to set your desired password length. A new password generates automatically.
- Toggle character sets using the chips:
A–Z,a–z,0–9, and!@#$%^&*. At least one must stay active. - The strength meter and estimated crack time update instantly below the password.
- Click the copy icon — a "Copied!" tooltip appears. Click the refresh icon to regenerate.
- Type or paste the password you want to check. Use the eye icon to show or hide it.
- Press Enter or click the Check for Data Breaches button.
- Results show whether the password was found in breaches and exactly how many times.
- Type your word, name or phrase in the input — for example your pet's name or a phrase you remember.
- Choose a Substitution Level: Basic or Full, and optionally append random digits or a symbol.
- The converted password appears instantly. Click the copy icon to copy it.
myfluffy dog for a result that is memorable and strong.- Type or paste any password — the analysis updates in real time as you type.
- The strength bar and score give you an instant visual summary.
- The crack time grid shows estimates across four attack scenarios.
- If the password is weak, improvement suggestions appear automatically.
- Four preset PINs (4, 6, 8, 10 digits) are generated automatically when you open the tab.
- Drag the slider to set a custom PIN length from 4 to 16 digits.
- Click the copy icon next to any PIN card, or use the main copy button for your custom PIN.
- Click the refresh icon to regenerate all PINs at once.
- Drag the slider to choose 3–10 words. More words = more security.
- Choose a Word Separator such as a dash, dot or symbol.
- Set Append Numbers to add random digits at the end.
- Toggle Capitalize to make the first letter of each word uppercase.
Tiger-Cloud-River-Boot-42 is easier to remember than a random password and typically has 60–80 bits of entropy.