🔐
Security Generators
6 generators — Generate strong passwords, PINs, and cryptographically secure random tokens
Generate strong, random passwords, PINs, and security tokens for accounts and applications.
API Key
API Key Generator
Generate cryptographically secure API keys in hex, base62, or prefixed formats. Choose key length and format. Runs entirely in your browser — nothing stored.
CSR
SSL Certificate CSR Generator
Generate the OpenSSL command and config file to create a Certificate Signing Request for your domain. Free, in-browser, no private key created.
Hash
Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from any text instantly. All hashing runs in your browser — nothing is uploaded or stored.
Passphrase
Passphrase Generator
Generate strong, memorable passphrases from a curated word list. Customise word count, separator, and capitalisation — browser-based, no sign-up required.
Password
Password Generator
Generate strong, random passwords with customisable length and character rules. Works entirely in your browser — nothing is ever stored or transmitted.
PIN
PIN Generator
Generate secure, random PINs of any length — 4 to 16 digits. Numeric or alphanumeric, entirely in your browser with no data stored or transmitted.
About Security Generators
The Security generators category produces cryptographically random secrets — passwords, passphrases, PINs, and API keys — that are unpredictable, non-reproducible, and suitable for production security use. All generators use the browser's Web Crypto API for randomness, not Math.random().
Why generated secrets are more secure
Human-chosen passwords follow predictable patterns that password cracking tools explicitly target: capitalised first letter, trailing number, letter-to-symbol substitutions (@ for a, $ for s), and common base words. Even passwords that feel random to their creator are statistically clustered compared to true random output. Generated secrets have none of these patterns — every character position is independently random.
What's in this category
The Password Generator produces character-based passwords with configurable length and character sets — the standard tool for generating login credentials. The Passphrase Generator produces word-sequence passwords that are longer and thus cryptographically stronger, while remaining human-typeable. The PIN Generator produces numeric-only codes for ATM cards, phone locks, and 2FA systems. The API Key Generator produces tokens in formats suitable for application secrets, webhook signing keys, and session tokens.
Use with a password manager
Generated passwords are intentionally unmemorizable. The correct workflow is always: generate → copy → paste into your password manager → save. Never commit generated secrets to version control, store them in plain text files, or reuse them across accounts.
Privacy
Nothing is transmitted or stored. Generation is local, using your browser's cryptographic random source.
Frequently Asked Questions
The Security category includes four generators: the [Password Generator](/password-generator/) for strong random passwords with configurable character sets, the [Passphrase Generator](/passphrase-generator/) for human-memorable word-based passwords, the [PIN Generator](/pin-generator/) for random numeric PINs of any length, and the [API Key Generator](/api-key-generator/) for random tokens used to authenticate applications and services.
A password is a short string of random characters — letters, digits, and symbols. A passphrase is a sequence of random words (e.g. 'correct-horse-battery-staple'). Passphrases are longer in character count than typical passwords, making them mathematically harder to brute-force, yet easier for humans to remember and type. The [Passphrase Generator](/passphrase-generator/) produces word-based secrets; the [Password Generator](/password-generator/) produces character-based ones. For accounts where you must type the password (not paste it), a passphrase is often more practical.
Humans are poor random-number generators — we unconsciously avoid certain patterns, favour memorable substitutions (@ for a, 3 for e), start with capital letters and end with numbers, and reuse words from our memory. Attackers exploit these habits in dictionary attacks and rule-based cracking. The [Password Generator](/password-generator/) uses a cryptographically secure random source to produce passwords that have no such patterns, making them resistant to every class of guessing attack.
An API key is a random token that acts as a credential for a service — it identifies and authorises the calling application without a username and password. The [API Key Generator](/api-key-generator/) generates cryptographically random strings in common API key formats (hex, base62, UUID-style) suitable for use as: secret keys in environment variables, webhook signing secrets, session tokens for internal services, seed values for HMAC, or default secrets in development configuration files before a production secret is provisioned.
A 4-digit PIN has 10,000 possible values — adequate for physical devices with lockout-after-N-attempts protection (ATM cards, phone SIM locks) but weak for any system that allows unlimited guesses. A 6-digit PIN has 1,000,000 values. For software-based 2FA (TOTP codes), 6 digits is the standard. For account recovery PINs or one-time codes in applications, 8 or more digits is safer. The [PIN Generator](/pin-generator/) generates PINs of any length you specify.
Always store it in a password manager. Generated passwords are deliberately designed to be unmemorizable — a 20-character random string like 'X7@kP2mQ!nL9vR3wJ5dF' cannot be reliably memorised. The correct workflow is: generate a strong password, immediately save it in your password manager, then use the paste function from the manager each time you log in. Never write generated passwords in plain text files, notes apps, or on paper.
Yes. All generators in this category use the browser's Web Crypto API (`crypto.getRandomValues`) as the source of randomness — the same cryptographic-quality random number generator used by security software. This is distinct from `Math.random()`, which is not cryptographically secure and should never be used for security-sensitive values. The cryptographic randomness means the generated values are unpredictable and suitable for production security use.
No. All generation happens in your browser using JavaScript. Nothing you generate is sent to any server, logged, or stored. Each time you click Generate, a new value is created locally from a fresh random seed. There is no record of what was generated — if you close the tab without copying the value, it is gone permanently.
For maximum security with no compatibility constraints, include all four: uppercase letters (A–Z), lowercase letters (a–z), digits (0–9), and special characters (!@#$%^&*). For systems with restrictions — some databases and shell scripts treat certain characters specially — you can exclude problematic characters from the [Password Generator](/password-generator/) settings. A 16-character password with all four character types has a search space of approximately 10^31, which is computationally infeasible to brute-force.
The [Passphrase Generator](/passphrase-generator/) draws words from a large curated wordlist using a cryptographically secure random source — the security depends entirely on the randomness of word selection, not on the words themselves being obscure. A passphrase of 4 common words from a 7,776-word list (Diceware) has approximately 4.7 × 10^15 possible combinations — stronger than most random character passwords of 10–12 characters. The words are memorable precisely because they are common; the security comes from the random selection.
Browse All Categories
Calculators
BiologyCalculate genetics, ecology, population growth, and biological metricsChemistrySolve molar mass, concentration, pH, stoichiometry, and chemical equationsConstructionEstimate materials, areas, volumes, and costs for building projectsEcologyCalculate carbon footprint, biodiversity indices, and environmental impactEverydayFuel cost, electricity bill, BMI, tip, and much moreFoodCalculate calories, nutrition, recipe scaling, and cooking conversionsHealthCalculate BMI, daily calories, body fat percentage, and ideal weightFinance & InvestmentCompound interest, 401(k), retirement, CAGR, and SIP growthLoanCalculate mortgage, auto, and personal loan payments instantlyMarketingCPM, ROAS, engagement rate, CLV, CAC, and campaign ROIMathSolve percentage, ratio, average, and common number problems instantlyPhysicsSolve mechanics, optics, thermodynamics, and electrical circuit problemsSportsCalculate pace, split times, training zones, and athletic performance metricsStatisticsCompute mean, median, standard deviation, probability, and regressionTaxCalculate US federal tax, UK take-home pay, and India income taxTextWord count, reading time, byte size, and text tools
Converters
Data & DigitalConvert bits, bytes, KB, MB, GB, and transfer ratesEnergy & PowerConvert energy, power, pressure, force, torque, and work unitsEverydayConvert cooking measures, shoe sizes, clothing sizes, and Roman numeralsMeasurementConvert length, weight, area, volume, and temperature across systemsNumbersConvert between number bases, Indian notation, and Roman numeralsScienceConvert angles, frequency, density, and other scientific measurement unitsTime & SpeedConvert time durations, speed, and vehicle fuel efficiency units
Generators
DesignGenerate colour palettes, CSS gradients, and visual design assetsDeveloper ToolsGenerate UUIDs, hashes, QR codes, and fake test dataEverydayRandom name pickers, decision helpers, and everyday quick generatorsSecurityGenerate strong passwords, PINs, and cryptographically secure random tokensText & ContentGenerate lorem ipsum, placeholder text, and random word content
Formatters
Validators