Free password tools that never save what you type
MoolKey's free password tools help you create random passwords, memorable passphrases and PINs, then check strength, breach exposure and entropy. Your input stays in your browser. The breach checker makes one limited request with the first five characters of a local hash.
- Six free tools
- No signup
- No values saved
Create
New random secrets
Check
Existing secret signals
Choose the job you need done
Creating and checking are different jobs. Start on the side that matches the question in front of you, then open the tool directly. Every result includes the numbers or limits behind it.
Create something stronger
Use cryptographic randomness instead of a name, date or familiar pattern.
Check what you already have
Measure guessability, known exposure or the size of the search space.
Which password tool should you use?
Use a generator to create something new. Use a checker when you need to understand an existing password. Strength measures guessability, while a breach check measures known exposure. Those results are related, but they are not interchangeable.
- I need a password for a website or app
- Password generator
Choose this when software will remember the result for you. You control the length and allowed characters.
- I need something I can type from memory
- Passphrase generator
Choose random words for the small number of secrets you must enter by hand.
- I need digits for a card, lock or device
- PIN generator
Choose a random PIN that can exclude common sequences, repeats, dates and birth years.
- I want to know how easy a password is to guess
- Strength checker
Check for patterns that attackers try before brute force, including words, dates and keyboard runs.
- I want to know whether a password has leaked
- Breach check
Look for the exact password in public breach data without sending the password or its full hash.
- I want to understand the numbers
- Entropy calculator
Calculate entropy, keyspace and estimated crack time from a generated secret's length and character pool.
What leaves your browser?
The generators, strength checker and entropy calculator keep the values they handle on your device. The breach checker needs one carefully limited request so it can compare your password with the Have I Been Pwned corpus.
Read the Pwned Passwords API methodA clean breach result means the exact password was not found in that public corpus. It does not prove the password is strong or that an account was never breached.
Skip straight to the exact format
Use a fixed-length page when a site has a hard limit or you want a shareable answer for one format. A 16-character password from the full 86-symbol pool carries 102.8 bits of entropy.
Questions before you type anything
The short version: the tools are free, they do not save your values, and the breach checker documents the only external lookup.
Are these password tools really free?
Yes. All six tools are free to use without an account, email address, payment card or trial. The generators, checkers and calculator do not have a usage limit or a separate paid result. You can open a tool, finish the task and leave without giving MoolKey personal details.
Do these tools send my password anywhere?
The password generator, passphrase generator, PIN generator, strength checker and entropy calculator keep the value on your device. The breach checker hashes the password locally and sends only the first five characters of that hash to Have I Been Pwned. Your password and full hash are never sent.
Which tool should I use?
Use the password generator for accounts that software will remember, the passphrase generator for a secret you must type, and the PIN generator for cards, locks or devices. Use the strength checker to measure guessability, the breach checker to look for known exposure, and the entropy calculator to inspect the math.
Is a strong password the same as an unbreached password?
No. Strength and exposure answer different questions. The strength checker estimates how quickly an attacker could guess a password from its patterns. The breach checker looks for the exact value in a public corpus. A weak password may not appear there yet, and a strong password should still be replaced if it has leaked.
Why use MoolKey after generating a password?
A generator creates a strong password once, but you still need a safe way to get it later. MoolKey takes a different approach: it recreates the same password on demand from one private phrase and the account details. That removes the saved password copy while keeping each account's result separate.
Generating the password is the easy part. Getting it back later is harder.
MoolKey recreates the same password on demand from one private phrase and the account details. Each account gets a separate result without leaving a saved password copy for MoolKey to retrieve.