Bulk password generation
A batch of passwords for staff, a test environment or an import into your inventory system. Export to TXT, CSV and JSON.
Batch
How many passwords do you need
Set the quantity and the export format here; the rules for the passwords themselves — mode, length and character sets — are in the panel below.
Password length
Character sets
Select at least one character set.
Passphrase settings
A 2048-word list gives exactly 11 bits per word (the Diceware method). Six words are 66 bits, eight are 88. The words are drawn by a cryptographic generator, not by a human — that is the whole point.
Password pattern
a — lowercase, A — uppercase, L — any letter, 9 — digit, # — symbol, X — letter or digit, * — any enabled character, c/v — consonant/vowel. Every other character is copied as is, \ escapes the next one.
Fine tuning
“Safe symbols only” keeps !@#$%^&*_-+=? — almost every site accepts them and they do not break shell commands, CSV or SQL.
What happens to your password
The password is assembled in your browser from the cryptographic randomness source crypto.getRandomValues with rejection sampling, so every character is equally likely.
The page never sends passwords to a server, never writes them to browser storage and drops the history when the tab closes.
Password letter by letter
Phonetic spelling for reading a password out over the phone. Letter case is stated separately.
Practice
Handing passwords out without opening a hole
Do not email them. The message stays in the sender’s mailbox, the recipient’s mailbox and on both servers. Use shared access in a password manager or a one-time link service that burns after reading.
Force a change on first login. A password issued by an administrator is already known to at least one other person — the one who issued it.
Keep the export briefly. A passwords.csv in the Downloads folder outlives job changes and laptop migrations. Delete it as soon as the import is done.
Watch the bits column. It is what you show when security asks whether the issued passwords meet the internal policy.
Formats
Which export to choose
| Format | When you need it |
|---|---|
| Plain list | pasting into a script or a note to yourself |
| Numbered | handing out by number, ticking off what is issued |
| CSV | Excel, Google Sheets, imports into inventory systems |
| JSON | feeding a deployment script or an API |
| Login and password | ready user001;password pairs for mass account creation |
The CSV ships with a BOM and semicolons as separators, so Excel opens it directly without the import wizard.
Questions
Frequently asked questions
How many passwords can I create at once?
Up to 1000. Each one is generated independently by the same cryptographic method as a single password and gets the same entropy estimate.
How do I hand passwords out to staff?
Not by email and not in a messenger. Export the CSV, import it into a shared password manager, or hand them over through a one-time link service. Require a change on first login.
What does the “bits” column mean?
The entropy of that particular password. It comes in handy when you have to prove compliance with an internal password policy: 80 bits and above satisfies almost any requirement.
Next