Bulk password generator — up to 1,000 random passwords at once

Set a length and the character types, choose how many you need, and the tool makes up to 1,000 random passwords at once, shows the exact entropy of each, and offers them as a passwords.txt download.

Live demo · real result from this tool

Press Generate to create a result.

Processed on your device — nothing is uploaded.

How to use the bulk password generator

  1. Move the Length slider (4 to 128 characters; 16 by default).
  2. Tick the character types: Uppercase (A–Z), Lowercase (a–z), Digits (0–9) and Symbols (!@#$…).
  3. Optional: tick Exclude look-alikes, keep Include at least one of each chosen type on if a system demands it, and type any banned characters into Also exclude these characters.
  4. Set How many passwords (1 to 1,000; 20 by default) and press Generate.
  5. Copy the list, or download All passwords as passwords.txt, one password per line.

What it does and when to use it

This tool is for the moments you need many passwords at once: setting up accounts for a new class or team, printing temporary Wi-Fi or kiosk logins, seeding a test database with realistic credentials, or rotating the passwords on a set of service accounts. Every password in the batch follows the same rules, and the strength figures apply to each one.

For a single password to use yourself, the strong password generator is simpler. To check a password someone else chose, use the password strength checker. If you need tokens rather than passwords, the random string generator has a plain length-and-alphabet setup.

How it works

The tool builds a pool from the ticked sets after removing any excluded characters, then picks each character with crypto.getRandomValues and rejection sampling, so every character in the pool is equally likely. When every type is required, a password missing one is thrown away and redrawn, which keeps the result uniform over the allowed passwords.

Entropy is log2 of the exact number of possible passwords, counted with inclusion–exclusion. The Strength label is this site’s own scale: under 28 bits very weak, under 36 weak, under 60 fair, under 80 strong, and 80 or more very strong.

Worked examples

  • Readable letters and digits. Length 16, Symbols off, Exclude look-alikes on. The pool shrinks to Character pool: 56 (24 upper, 24 lower, 8 digits) and each password has 92.8 bits, still rated very strong.
  • Number-only codes. Length 12, digits only, “each type” off. The result is Entropy: 39.9 bits and the label Fair: fine for a short-lived code, weak for a long-term password.
  • Nothing ticked. With all four sets off, the tool stops with “Choose at least one character set (and do not exclude every character).”

Limits and tips

  • The list exists only in this page until you copy or download it. Reloading makes a new batch.
  • If your exclusions remove every character of one type (all ten digits, say), that type is quietly dropped from the pool and no longer required.
  • Some systems cap length or forbid symbols. Match their rules here instead of editing passwords by hand, which can weaken them.

Frequently asked questions

Are the passwords in a batch related to each other?
No. Each password is drawn separately from the browser's cryptographic random source, so knowing one password in the list tells you nothing about the others.
Why is the entropy slightly lower than length × log2(pool)?
With "Include at least one of each chosen type" ticked, passwords that miss a type are not allowed, so there are a few fewer possible passwords. The tool counts that smaller set exactly and reports log2 of it. For 16 characters from all 94 symbols this gives 104.6 bits instead of 104.9.
Is it safe to hand out a list like this?
Treat the list as a set of secrets. Send each person only their own password over a private channel, ask them to change it at first login, and delete the passwords.txt file once everyone has theirs.
Which characters count as look-alikes?
0, O, o, 1, l, I, the bar |, the backtick and both quote marks. Removing them helps when people read passwords from paper or a screen. Use "Also exclude these characters" for anything else a system rejects, such as { } or a space.
How many passwords can I make?
Between 1 and 1,000 per click, with a length from 4 to 128 characters.

Written by the ToolsRift team · Last updated

Pages are drafted with AI assistance and checked by automated tests. How we write and check pages.

Was this tool useful?

Report a problem

Start typing to search every tool.

↑ ↓ to moveEnter to openEsc to close