BYTETOOLS

Bulk Password Generator

Generate up to 1000 strong passwords at once with a length and character policy, minimum counts per character set, ambiguous-character filtering and entropy in bits.

Character sets and minimums
Minimum uppercase
Minimum lowercase
Minimum digits
Minimum symbols

Every character comes from crypto.getRandomValues() with rejection sampling, so no character is even slightly more likely than another. Passwords are created in your browser, never sent anywhere and never stored — close the tab and they are gone, so copy or download them before you navigate away.

What is the Bulk Password Generator?

The Bulk Password Generator creates up to a thousand passwords in a single pass, which is what you need when you are provisioning accounts, seeding a staging environment or handing out temporary credentials.

  • Up to 1000 passwords in one pass
  • Per-set minimums for uppercase, lowercase, digits and symbols
  • Ambiguous character filter for printed or spoken passwords
  • Entropy in bits and a plain-English strength rating
  • Cryptographically secure, unbiased character selection
  • Copy all, or download as TXT or CSV

How to use the Bulk Password Generator

  1. 1

    Set how many passwords you need and how long each one should be.

  2. 2

    Tick the character sets to use and set a minimum count for each one.

  3. 3

    Optionally exclude ambiguous characters if the passwords will be printed or read aloud.

  4. 4

    Press Generate passwords and check the reported entropy in bits.

  5. 5

    Copy the whole list, or download it as TXT or CSV.

About the Bulk Password Generator

The Bulk Password Generator creates up to a thousand passwords in a single pass, which is what you need when you are provisioning accounts, seeding a staging environment or handing out temporary credentials. Set the length once, choose which character sets to draw from, and get a clean list you can copy or download as TXT or CSV.

Policies are enforced properly rather than left to chance. You can demand at least two uppercase letters, two digits and two symbols, and every password is guaranteed to satisfy those minimums. Excluding ambiguous characters removes the glyphs people misread when a password is printed or read aloud, such as the letter l, the digit 1, capital O and zero.

Every character comes from your browser's cryptographic random source with rejection sampling, so no character is even slightly more likely than another. Nothing is uploaded and nothing is stored — once you close the tab the passwords are gone, so copy or download them first.

Frequently asked questions

How many bits of entropy should a password have?

Around 75 bits is comfortable for an ordinary account and 100 or more is excellent for anything valuable. A 16-character password drawn from all four character sets lands near 100 bits, which is far beyond what offline cracking can reach today.

Are these passwords actually random?

Yes. Every character is picked using crypto.getRandomValues, your browser's cryptographically secure random source, with rejection sampling so that no character is favoured. There is no pattern to predict and no hidden seed.

Does requiring symbols and digits make a password weaker?

It shaves a fraction of a bit off the theoretical maximum, because a few combinations are excluded. In practice that loss is trivial and it is far outweighed by satisfying the password policies that most systems enforce.

Are the generated passwords sent anywhere or saved?

No. They are created in your browser and exist only in the page. Nothing is transmitted, logged or written to storage, so copy or download the list before you navigate away or it is lost for good.

What are ambiguous characters and should I exclude them?

They are characters that look alike in many fonts, such as capital O and zero, or lowercase l and the digit one. Exclude them when a password will be printed, written down or read over the phone; leave them in for passwords that only ever get pasted.

Related tools