Passwords

Passwords brings together 5 free tools with no sign-up to create and assess secrets. Check if a password was breached looks up published breaches without ever sending it, Password Entropy estimates the search space and strength, and Passphrase Generator produces a secret phrase. API Key Generator and TOTP secret complete the page. Useful for both everyday users and developers.

Start with your need. To know whether an existing secret appears in breaches, use Check if a password was breached. To measure strength, Password Entropy gives an estimate. To create a memorable secret, Passphrase Generator is suitable, while API Key Generator targets technical keys. TOTP secret is used for two-factor authentication. Choose based on whether you verify, measure or generate.

How to use

  1. For an existing secret, start with Check if a password was breached and note the result without transmitting the value.
  2. To measure strength, use Password Entropy and interpret the displayed search space and bits.
  3. To create a memorable secret, use Passphrase Generator, while API Key Generator suits technical keys.
  4. For two-factor authentication, finish with TOTP secret and keep the Base32 secret in a safe place.

Frequently asked questions

Is the password sent anywhere?

No. Check if a password was breached looks up published breaches without ever sending it. The check stays local to the browser, with no sign-up. That lets you review a secret without transmitting it.

What is the difference between a passphrase and an API key?

Passphrase Generator creates a memorable secret phrase with cryptographic randomness. API Key Generator produces a hexadecimal key with an optional prefix. The first is meant for human use, the second for a technical use in an application.

In what order should I check and renew a secret?

First check with Check if a password was breached, then assess strength with Password Entropy. If the secret is weak or exposed, replace it with an output from Passphrase Generator or API Key Generator depending on use.

Does TOTP secret replace a password?

No. TOTP secret generates a Base32 secret for two-factor authentication. It complements a password or passphrase, but does not replace the main secret. Use it with a generator suited to your need.

Tools in the same category