Bulk password generator

Generate up to 500 unique, random passwords in one go for onboarding, resets or test accounts. Export CSV or TXT. The batch never leaves this tab.

Each password: 93 bits of entropy from the random part.

0 passwords

Bulk passwords for IT admins, without a server

Most bulk generators run on someone else’s server, which means a list of fresh credentials has passed through a machine you don’t control. This one runs in your browser: the passwords are generated with the Web Crypto API and exist only in this tab until you copy or export them.

Suggested settings

  • Temporary passwords for new starters: 16 characters, letters and digits, look-alikes off. Easy to read over the phone, about 91 bits.
  • Service and test accounts: 24–32 characters, all types. Nobody types these.
  • Legacy systems with length caps: use the maximum length the system allows and turn every character type on.

Handle the export carefully

A CSV of live passwords is a sensitive file. Import it straight into your identity provider or password manager, then delete it. The CSV export guards against spreadsheet formula injection by quoting any value that starts with =, +, - or @.

Writing the rules that go with these passwords? The password policy generator drafts a NIST-aligned policy for your organisation. Storing them in your own app? Hash them with bcrypt.

Questions people ask

How many passwords can I generate at once?

Up to 500 per batch. Each one is generated independently with crypto.getRandomValues in your browser, so there are no patterns shared between passwords in the same batch.

Is it safe to generate passwords for other people here?

Nothing is sent to a server: the batch exists only in this browser tab. Treat the exported file as sensitive, hand the passwords over through a secure channel such as your password manager’s sharing feature, and require users to change them at first sign-in if your process calls for it.

What export formats are there?

Plain text with one password per line, and CSV with an index, the password, its length and its entropy in bits, ready to import into a spreadsheet or a provisioning script. You can also copy the whole list to the clipboard.

Can I add a prefix to every password?

Yes. A fixed prefix or suffix is added to every password in the batch. It adds no entropy because it is the same everywhere, so the entropy figure only counts the random part.

Will there be duplicates?

With 12 or more random characters the chance of a duplicate in 500 passwords is effectively zero. The generator still checks and replaces any duplicate so every line is unique.