Generators
11 tools, all running in your browser
Tools that produce something new rather than change what you already have: a password, a QR code, a UUID, a digest, a page of filler text, or a maze or dungeon map to print. All of it is made in your browser, which matters most for the password, since one generated here has never existed anywhere else.
- QR code generatorMake a QR code for a link, wifi, a contact card, a text message, or an email, as SVG or PNG.
- Password generatorA password drawn from your system random source, never transmitted.
- Maze generatorMazes in any shape, from a square to a word, printed with answer keys.
- Favicon generatorTurn a logo, a letter, or an emoji into favicon.ico and every size phones ask for.
- UUID generatorBulk UUIDs, random version 4, name-based version 5, or time-ordered version 7, in any shape.
- Lorem ipsum generatorDummy text by the paragraph, sentence, or word, for a mockup.
- Hash generatorCRC32, MD5, SHA-2, SHA-3, and Keccak-256 of any text or file, all at once.
- HMAC generatorSign a message with a secret key, and check a webhook signature against it.
- Dungeon map generatorNumbered rooms and corridors, or caves, on a grid, to print or use online.
- Bcrypt generatorHash a password with bcrypt at any cost, or test a password against a hash.
- Password strength checkerHow guessable a password is, which patterns give it away, and how long it would last.
Where the randomness comes from#
Not all random is the same. The everyday random number generator built into JavaScript is fast and predictable enough that, given a few outputs, the rest of the sequence can be worked out. That is fine for shuffling a carousel and unacceptable for anything a person will rely on to keep an account shut.
The password generator uses getRandomValues, the browser interface backed by the operating system entropy pool, which is the same source a password manager draws on. There is deliberately no fallback to the weaker one: if a browser cannot provide it, the tool says so rather than quietly handing you something worse than you asked for.
Placeholder text does not need that guarantee, so the lorem ipsum generator runs from a seed instead. That is what lets you nudge the paragraph count without the text you were already reading shuffling underneath you. Version 4 UUIDs come from the same cryptographic source as the passwords, because a UUID that can be predicted is not much of an identifier.
The maze generator and the dungeon map generator run from a seed too, shown as a number on the page. Changing a setting redraws the same maze or map, and typing the number back in brings back one you liked, on any device.
Why generating in the browser is the point#
A password generated on a web page you do not control is a password somebody else has seen. It may never be logged, and usually it is not, but the only way to be certain is for it never to have left your machine. Everything on this page is produced by your own browser and exists nowhere else until you paste it somewhere.
The same holds for a QR code, which is worth thinking about more than people usually do. Encoding a wifi password, a private link, or a calendar invite into a QR image on a server means handing that content over to build the picture. Here the encoder runs in the page, so the only copy is the one you download.
Frequently asked questions#
Is anything I generate sent to a server?
#
No. Every value on these pages is produced by your own browser and never transmitted. You can disconnect from the network once the page has loaded and they all keep working, which is the simplest way to check the claim.
Are these passwords safe to actually use?
#
Yes. They come from crypto.getRandomValues, the operating system entropy source your browser exposes, which is what password managers use. The page also shows the entropy in bits so you can see how much strength the settings you chose are actually buying.
Can I generate the same value twice?
#
Not for passwords, and deliberately so: each one is drawn fresh from the system random source with nothing kept. The placeholder text, the mazes, and the dungeon maps are different, because they run from a seed: changing the length extends the text rather than replacing it, and a maze or map number draws the same one again. Version 5 UUIDs repeat by design: the same namespace and name always give the same one.
Do you keep a copy of anything generated here?
#
No. There is no server to keep it on. Nothing is stored in the page either, so closing the tab is the end of it. Copy what you need before you leave.