Secure password generator
Create secure random passwords, one or thousands at a time, and download them as a list.
Strength of these settings
They are created in your browser with its cryptographic generator (crypto.getRandomValues). They are never sent or stored anywhere.
In the CSV, passwords starting with = + - @ get an apostrophe (') in front so the spreadsheet does not treat them as a formula: remove it when you use them, or download TXT or Excel, which keep them as they are.
How to generate secure passwords
Each password is created with your browser’s cryptographic generator. You can generate from one to 10,000 at a time and save them to a file without them passing through any server.
Choose the type (random characters or PIN) and the length.
Tick the characters and options you need: the strength in bits updates instantly.
Enter how many you want, press Generate and copy them or download them as TXT, CSV or Excel.
Why use JapalTools?
Your files never leave your device
Everything happens in your browser. Documents are never uploaded to any server, so you can use it with payslips, contracts or ID documents.
Free, no sign-up and no watermarks
You don't need an account or to leave your email, and nothing is added to the result.
Works on any device
Computer, tablet or phone, with an up-to-date browser (Chrome, Edge, Firefox or Safari). Nothing to install.
Frequently asked questions
Yes. They use the browser’s cryptographic generator (crypto.getRandomValues), not Math.random. Each character is picked by rejection sampling, so every allowed character has exactly the same probability.
They measure how many different passwords the settings can produce: each extra bit doubles the guesses someone would need. The calculation takes into account “At least one character of each type” and “No repeated characters”, which slightly reduce the combinations. From 80 bits it is rated strong, and from 100, very strong.
For online accounts, at least 16 characters with uppercase, lowercase, digits and symbols (about 100 bits). Use a different one for each site and keep them in a password manager.
No. They only exist on the page while it is open and in the files you download. If you tick “Remember these settings”, the browser stores the chosen options (length, characters, quantity), never the passwords; unticking it deletes them.
A spreadsheet treats anything starting with = + - or @ as a formula, which can be dangerous. That is why those passwords get an apostrophe in front in the CSV. The TXT and Excel files keep them exactly as they are.
No. The document is processed in your own browser and is not sent to JapalTools or anyone else. When you close the page, no copy remains outside your device.