General Tools
Create and inspect practical everyday values such as QR codes and passwords locally, with clear controls and no account required.
Which of the two you want
- Password Generator
- An account needs a password you will never type from memory, and your manager is not to hand.
- QR Code Generator and Reader
- A link has to make the jump from a screen or a page to somebody's phone — or one already has and you want to read it before trusting it.
Two things worth understanding before you use them
A password's strength is a number, and it is worth knowing which one. With all four character sets on, the generator draws from eighty characters — the ambiguous ones are deliberately absent, so there is no lowercase l, no capital I or O, and no zero or one to misread off a screen or a printout. Eighty characters is about 6.3 bits of unpredictability each, so twelve characters is roughly 76 bits and sixteen is roughly 101. The figure the tool reports is deliberately conservative: because it guarantees at least one character from every set you enabled, and a guarantee removes possibilities rather than adding them, the true strength is a little above what you see.
A QR code is bytes with error correction wrapped around it, and nothing more. It has no idea whether the text inside is a URL, a Wi-Fi password, or a sentence, and scanning one tells you nothing about where it leads — which is exactly why printed codes in public places are worth distrusting. Higher error correction survives more damage and smudging, and pays for it in density: the same text at the strongest level packs more squares into the same square, so a code meant for a small printed label should not use it.
Neither tool remembers anything. A generated password exists in the tab until you copy it somewhere, and a reload loses it for good — there is no history to recover it from, by design, because a history of generated passwords is exactly the thing you would not want kept. Put it into a password manager before you navigate away.
Frequently asked questions about General Tools
Why are some letters and digits missing from generated passwords?
The ambiguous ones are excluded on purpose: lowercase l, capital I, capital O, zero, and one. They are the pairs people mistype when reading a password off a screen, a sticky note, or a printed recovery sheet. It costs a fraction of a bit per character and saves a support call, and the strength figure counts the alphabet that is actually used rather than the one that would look better.
Is a generated password sent or stored anywhere?
No. It is produced by the browser's own cryptographic random number generator, in the tab, and never leaves it. Nothing is written to storage and nothing is transmitted, which also means nothing can be recovered once the tab is closed. Copy it into a password manager first.
Can a QR code hold a file?
No, and it is a common expectation. A QR code holds a few thousand characters at most, which is a link, a phone number, a Wi-Fi credential, or a short note — not a document and not an image. The usual answer is to put the file somewhere and put the link in the code.
Is scanning a code here safe?
The reading happens in your browser and the image never leaves it, so the scan itself carries no risk. What the code contains is another matter: it is untrusted text from whoever made it, and a link decoded here should be read before it is opened, exactly as you would read one in an email from a stranger.