Bulk Password Generator

Strong random passwords, one or ten thousand at a time. Generated on your device.

Presets
Presets set a typical length and character mix. Check your organisation's exact rules.
Characters
Rules
Strong · ≈98 bits · cracked in ~527 billion years
Export

    🔒 Generated in your browser with crypto.getRandomValues. Never sent to our servers.

    Random passwords for people, teams and test accounts

    Create a single strong password for a new account, or a batch for onboarding a team, seeding test users or rotating service credentials. Choose the length and character sets, apply a policy preset and export the list in the format your tools expect.

    • Bulk mode — up to 10,000 passwords per run, copy all or export.
    • 13 presets — Strong, Maximum, Easy to read, typical NIST, PCI DSS, HIPAA, Active Directory and AWS IAM settings, Wi-Fi, database and API keys, plus our own RNDGen set: 30 passwords, 32 characters, every rule on.
    • Readable when needed — exclude look-alike characters such as l, 1, O and 0.
    • Private — generated locally with a cryptographic random generator.

    Need something easier to type? Try the passphrase generator or the PIN generator.

    FAQ

    How do I generate passwords in bulk?

    Set the length and character types, enter how many you need (up to 10,000) and press Generate. Copy them all at once or export as TXT, CSV, JSON or a Bitwarden import file.

    Are these passwords safe to use?

    Yes. They are created in your browser with crypto.getRandomValues, the same cryptographic generator password managers rely on. Nothing is sent to or stored on our servers.

    What length should I choose?

    For accounts, 16 characters with mixed character types is a strong default. For service accounts and API secrets use 20 or more. The strength meter shows the entropy in bits.

    What do the presets do?

    One click sets the length and character types. General presets (Strong, Maximum, Easy to read, Letters & digits), typical settings for NIST, PCI DSS, HIPAA, Active Directory and AWS IAM rules, use cases like Wi-Fi keys, database passwords and API keys, and the RNDGen set with every rule on. They are a starting point, not a compliance check: adjust any setting to your organisation’s rules.