Generators
5 tools, all running in your browser
Tools that produce a value rather than change one you already have: a password, a QR code, a UUID, a digest, a page of filler text. All of it is made in your browser, which matters most for the password, since one generated here has never existed anywhere else.
- Hash generatorMD5 and the SHA family, all computed at once from the same text.
- Lorem ipsum generatorFiller text by the paragraph, sentence or word, for a mockup.
- Password generatorA password drawn from your system random source, never transmitted.
- QR code generatorMake a QR code from a link or text, and download it as SVG or PNG.
- UUID generatorBulk version 4 UUIDs in whichever shape your database wants them.
Where the randomness comes from#
Not all random is the same. The everyday random number generator built into JavaScript is fast and predictable enough that, given a few outputs, the rest of the sequence can be worked out. That is fine for shuffling a carousel and unacceptable for anything a person will rely on to keep an account shut.
The password generator uses getRandomValues, the browser interface backed by the operating system entropy pool, which is the same source a password manager draws on. There is deliberately no fallback to the weaker one: if a browser cannot provide it, the tool says so rather than quietly handing you something worse than you asked for.
Placeholder text does not need that guarantee, so the lorem ipsum generator runs from a seed instead. That is what lets you nudge the paragraph count without the text you were already reading shuffling underneath you. Version 4 UUIDs come from the same cryptographic source as the passwords, because a UUID that can be predicted is not much of an identifier.
Why generating in the browser is the point#
A password generated on a web page you do not control is a password somebody else has seen. It may never be logged, and usually it is not, but the only way to be certain is for it never to have left your machine. Everything on this page is produced by your own browser and exists nowhere else until you paste it somewhere.
The same holds for a QR code, which is worth thinking about more than people usually do. Encoding a wifi password, a private link or a calendar invite into a QR image on a server means handing that content over to build the picture. Here the encoder runs in the page, so the only copy is the one you download.
Frequently asked questions#
Is anything I generate sent to a server?
#
No. Every value on these pages is produced by your own browser and never transmitted. You can disconnect from the network once the page has loaded and they all keep working, which is the simplest way to check the claim.
Are these passwords safe to actually use?
#
Yes. They come from crypto.getRandomValues, the operating system entropy source your browser exposes, which is what password managers use. The page also shows the entropy in bits so you can see how much strength the settings you chose are actually buying.
Can I generate the same value twice?
#
Not for passwords, and deliberately so: each one is drawn fresh from the system random source with nothing kept. The placeholder text is different, because it runs from a seed, so changing the length extends what is there rather than replacing it.
Do you keep a copy of anything generated here?
#
No. There is no server to keep it on. Nothing is stored in the page either, so closing the tab is the end of it. Copy what you need before you leave.