Tools · Everyday
Password guide and generator
Generate a password in this browser, then store it in a password manager. The password is created with crypto.getRandomValues and is not sent to SuperStack.
The password is created in this browser. It is not sent to SuperStack, and the server never returns one.
How to use it
- Choose a length and at least two character types. Twenty characters is a sensible default.
- Generate the password. It stays on this page. Copy it into a password manager rather than into a note or a chat.
- Turn on a second factor for mail and for banking. A long password does not replace that.
Questions
- Is the password sent to the server?
- No. This page generates it with crypto.getRandomValues. The JSON API returns the policy and an entropy estimate only. It never returns a password, and nothing is stored.
- Why are some letters and digits missing?
- The set leaves out characters that are easy to mix up when you have to read them aloud, such as 0, O, 1, l and I.
- Is a long password enough for a South African bank or for SARS eFiling?
- No. Use a unique password in a password manager, and the second factor the bank or SARS already offers. Do not reuse the password from another site.
An automated client can POST JSON to /api/tools/password with the fields listed in the OpenAPI document. The OpenAPI document is at /api/tools, with a short guide at /llms.txt. Nothing submitted is stored.
This is general guidance, not a security audit. The API describes the character set. It does not store a password, and this page does not send one.