How to use the bulk password generator
- Move the Length slider (4 to 128 characters; 16 by default).
- Tick the character types: Uppercase (A–Z), Lowercase (a–z), Digits (0–9) and Symbols (!@#$…).
- Optional: tick Exclude look-alikes, keep Include at least one of each chosen type on if a system demands it, and type any banned characters into Also exclude these characters.
- Set How many passwords (1 to 1,000; 20 by default) and press Generate.
- Copy the list, or download All passwords as
passwords.txt, one password per line.
What it does and when to use it
This tool is for the moments you need many passwords at once: setting up accounts for a new class or team, printing temporary Wi-Fi or kiosk logins, seeding a test database with realistic credentials, or rotating the passwords on a set of service accounts. Every password in the batch follows the same rules, and the strength figures apply to each one.
For a single password to use yourself, the strong password generator is simpler. To check a password someone else chose, use the password strength checker. If you need tokens rather than passwords, the random string generator has a plain length-and-alphabet setup.
How it works
The tool builds a pool from the ticked sets after removing any excluded characters, then picks each character with crypto.getRandomValues and rejection sampling, so every character in the pool is equally likely. When every type is required, a password missing one is thrown away and redrawn, which keeps the result uniform over the allowed passwords.
Entropy is log2 of the exact number of possible passwords, counted with inclusion–exclusion. The Strength label is this site’s own scale: under 28 bits very weak, under 36 weak, under 60 fair, under 80 strong, and 80 or more very strong.
Worked examples
- Readable letters and digits. Length 16, Symbols off, Exclude look-alikes on. The pool shrinks to
Character pool: 56(24 upper, 24 lower, 8 digits) and each password has 92.8 bits, still rated very strong. - Number-only codes. Length 12, digits only, “each type” off. The result is
Entropy: 39.9 bitsand the label Fair: fine for a short-lived code, weak for a long-term password. - Nothing ticked. With all four sets off, the tool stops with “Choose at least one character set (and do not exclude every character).”
Limits and tips
- The list exists only in this page until you copy or download it. Reloading makes a new batch.
- If your exclusions remove every character of one type (all ten digits, say), that type is quietly dropped from the pool and no longer required.
- Some systems cap length or forbid symbols. Match their rules here instead of editing passwords by hand, which can weaken them.
Frequently asked questions
Are the passwords in a batch related to each other?
Why is the entropy slightly lower than length × log2(pool)?
Is it safe to hand out a list like this?
Which characters count as look-alikes?
How many passwords can I make?
How do we know nothing is uploaded? Test it yourself on the privacy proof page.