PASSFORGE — Password Generator

// Generated Password

—

Quick Presets

Pwned Password Check

Checks the password above against Have I Been Pwned's breach database. Only the first 5 characters of its SHA-1 hash are ever sent — a k-anonymity lookup — so the full password never leaves your browser.

Settings

Length, character types & generation rules

Password Length

Number of characters

Uppercase Letters

A–Z

Lowercase Letters

a–z

Numbers

0–9

Symbols

!@#$%^&*()_+-=[]{}|;:,.<>?

Brackets

()[]{}<>

Exclude Ambiguous

Removes 0, O, l, I, 1

No Repeated Chars

Each character used only once

Require Each Type

Guarantees at least one of each enabled type

Min. Numbers

Minimum digit count

Min. Symbols

Minimum symbol count

Exclude Characters

Custom chars to exclude

Hash & Encode

Digests, encodings, HMAC, comparison & breach check

Hashes

MD5

—

SHA-1

—

SHA-224

—

SHA-256

—

SHA-384

—

SHA-512

—

Encodings

Base16

—

Base32

—

Base64

—

HMAC

—

Compare Hashes

⚠ MD5 and SHA-1 are cryptographically broken (fast collisions, brute-forceable). Fine for checksums or legacy compatibility — never for password storage or security-critical signing. Prefer SHA-256 or higher for anything that matters.