Password List Generator

Generate bulk secure passwords free online. Plain text, CSV, JSON output. Cryptographically secure, browser-based, no registration, instant.

Free online file converter tool. Works in Chrome Firefox Safari Edge Opera and other modern browsers on Windows macOS Linux Android and iOS. No software installation required. All processing happens directly in your browser, so your files never leave your device. Completely free to use with no account needed.

Password List Generator

Generate bulk lists of cryptographically secure passwords. Plain text, CSV, or JSON output.

-

Password Generator Features

Cryptographically secure bulk password generation for any use case.

Cryptographically Secure

Uses Web Crypto API getRandomValues() for true randomness.

Multiple Formats

Export as plain text, CSV, or JSON for easy integration.

Custom Rules

Control length, character types, and exclude ambiguous characters.

How to Generate a Bulk Password List

  1. Set Count and Length Range

    Enter how many passwords you need (1 to 1000) and a minimum and maximum length (4 to 128 characters each). When the minimum and maximum differ, each password gets a random length picked from that range, so your list will contain varied lengths rather than one fixed size.

  2. Choose the Character Types

    Tick uppercase, lowercase, numbers, and symbols to control the character pool. The symbol set is !@#$%^&*()-_=+[]{}|;:,.<>?. Enable Exclude Ambiguous to strip 0, O, I, l, and 1 from the pool. At least one type must be selected or generation is blocked.

  3. Pick a Format and Export

    Select Plain Text, CSV, or JSON, then click Generate Passwords. Use Copy All to send the result to your clipboard, or Download to save it as passwords.txt, passwords.csv, or passwords.json. The list also regenerates automatically when the page first loads.

Output Formats at a Glance

The same passwords can be exported in three layouts. Each is built in your browser from the generated list, so the content is identical and only the structure differs. Choose the format that matches where the passwords will be used.

FormatStructureFile ExtensionBest For
Plain TextOne password per line, separated by line breaks.txtQuick copy and paste or pasting into another tool
CSVHeader row index,password then one numbered row per entry, with quotes escaped.csvOpening in a spreadsheet or importing into a table
JSONAn indented array of password strings.jsonLoading into code, scripts, or seeding test data
Copy AllSends the current formatted output to the clipboardn/aMoving the list straight into another window
DownloadSaves the formatted output as a local filematches formatKeeping a file copy on your own device

How to Configure for Your Use Case

Maximum Strength

Enable all four character types and leave Exclude Ambiguous off. Set a high minimum length, such as 20 to 24 characters. The larger the pool and the longer the password, the more combinations an attacker must try.

Easy to Read Aloud

Turn on Exclude Ambiguous so 0, O, I, l, and 1 are removed. This avoids the most common mix-ups when someone has to type a password from a screen or read it over the phone.

Strict System Rules

If a service rejects symbols, untick Symbols and rely on uppercase, lowercase, and numbers. Set the minimum and maximum length to the same value to force every password to an exact required length.

Bulk Test Data

Set a large count, up to 1000, and choose JSON so the array drops straight into a script or fixture. Keep generated test passwords out of any production system.

Common Problems and Fixes

It says to select at least one character type

Generation needs a non-empty character pool. Tick at least one of uppercase, lowercase, numbers, or symbols. If you enabled Exclude Ambiguous with only numbers selected, enough digits still remain, so re-check that a type is actually ticked.

Passwords are different lengths than expected

When the minimum and maximum length differ, each password is given a random length within that range. To force a single fixed length, set the minimum and maximum to the same number.

My values were changed after generating

Inputs are clamped to safe limits: count is held between 1 and 1000, and lengths between 4 and 128. A maximum below the minimum is raised to match the minimum, so an out-of-range entry is adjusted rather than rejected.

Copy All did not work

Copying uses the browser clipboard, which usually requires a secure HTTPS page and may prompt for permission. If nothing copies, allow clipboard access for the site, or use Download to save the list as a file instead.

References

  1. Crypto.getRandomValues() - MDN Web Docs, Mozilla
  2. NIST SP 800-63B: Digital Identity - NIST
  3. Password strength - overview
  4. Entropy (information theory) - overview
  5. CSPRNG - overview
  6. Blob - MDN Web Docs, Mozilla
  7. Clipboard.writeText() - MDN Web Docs, Mozilla
  8. Password special characters - OWASP