Security Tools – Password & Random String Generators

What's in this category?

The Password Generator creates strong random passwords from a configurable character set: lowercase, uppercase, digits and symbols, with options to exclude visually-confusing characters like 0/O and 1/l. Length is adjustable from 8 up to 64 characters. It uses crypto.getRandomValues() rather than Math.random(), so the output is suitable for real account credentials.

The Password Strength Checker estimates how long a brute-force attack would take based on length, character variety, common patterns and dictionary words. It rates the result from "Very Weak" to "Excellent", flags issues like sequential digits or repeated characters, and gives concrete recommendations — and like everything else on the site, the password you type is never sent to a server.

The Random String Generator is the developer-facing utility: pick a length and a character set (alphanumeric, hex, base64, custom), and it produces tokens, API keys, session IDs or invite codes. Useful for quickly mocking up test data or generating one-off identifiers.

Password best practices

The Australian Cyber Security Centre (ACSC) recommends a password manager combined with long, unique passphrases for every account, plus multi-factor authentication wherever it's offered. A password generator pairs nicely with that workflow: let the generator create a 20-character random string for the account, store it in your password manager, and never type it again. Reusing passwords across sites is the most common cause of compromise — once one site leaks, the attacker tries the same password everywhere else. Use these tools to break that habit.

Related Categories