About PassCraft

PassCraft is a free online security tool suite designed to help you create and manage strong passwords. In an era where weak or reused passwords are the leading cause of account breaches, PassCraft gives everyone the tools to generate cryptographically strong credentials — without installing software or creating an account.

Security First

All password operations run entirely in your browser using crypto.getRandomValues(), a cryptographically secure random number generator built into modern browsers. This is the same source of entropy used by professional security tools. No passwords, passphrases, or generated values are ever transmitted to our servers — we have no technical ability to see what you generate or check.

Our Tools

• Password Generator: Generate random passwords with custom length, character sets (uppercase, lowercase, digits, symbols), and exclusion rules to avoid ambiguous characters.
• Passphrase Generator: Create memorable passphrases from random word combinations — often stronger than complex passwords and much easier to remember.
• PIN Generator: Generate numeric PINs of any length for device locks, banking, and app authentication.
• API Key Generator: Create random API keys and tokens in common formats (hex, base64, alphanumeric) for development and testing.
• Password Strength Analyzer: Check the strength and estimated crack time of any password based on entropy, character set, and common pattern detection.
• Common Password Checker: Verify whether a password appears in lists of commonly used and compromised passwords.
• Encoding Tools: Encode and decode values in Base64, hexadecimal, and phonetic alphabets for security and communication use cases.

Who Uses PassCraft

PassCraft is used by individuals generating strong master passwords for password managers, developers creating API keys and test credentials, security-conscious users auditing their existing passwords, IT administrators setting up initial account credentials, and anyone who wants a quick, trustworthy way to generate a random value without relying on a cloud service.

Privacy Commitment

Because all generation and analysis happens in your browser, we have nothing to store and nothing to protect on our end. Your passwords are yours alone. We use only anonymized, aggregate analytics to understand how the tools are used — never what values are generated.

Contact

Questions? Visit our contact page.