About this tool
This page combines two everyday security utilities: a random password generator and a hash calculator. Both work offline inside your browser, so nothing you type is sent over the internet.
The password generator uses the browser's cryptographically secure random number generator (crypto.getRandomValues), not the weaker Math.random() that many online generators rely on. You can choose a length from 8 to 64 characters, select which character groups to include, and exclude look-alike characters such as O, 0, l and 1. A strength meter estimates the entropy in bits so you can see how hard the password would be to guess. As a rule of thumb, 12 or more random characters from a mix of groups is a good minimum for ordinary accounts, and 16 or more is better for email, banking and password-manager master passwords.
The hash generator calculates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 at once for any text or file. A hash is a fixed-length fingerprint of the input: the same input always gives the same hash, and even a one-character change gives a completely different result. Hashes are used to verify downloads, detect changed files and compare data without storing it. You can also compute an HMAC by entering a secret key, which proves that a message came from someone who knows the key.
Note that MD5 and SHA-1 are considered broken for security purposes because collisions can be created on purpose. They are still fine for non-security tasks such as checksums, but use SHA-256 or stronger for anything that matters. Never use a plain fast hash to store user passwords; use a dedicated password hashing function such as bcrypt, scrypt or Argon2 on your server.