Password Policy Generator
Generate password policy rules, regex and copy for NIST or PCI presets.
About the Password Policy Generator
Configure length, character classes, rotation and history rules to produce a written password policy, a matching validation regex and implementation notes.
Examples
Example
min 14 chars, all classesOutput
^(?=.*[A-Z])(?=.*[a-z])(?=.*\d).{14,}$Keyboard shortcuts
- Copy the main outputCtrl / ⌘ + Shift + C
- Download the resultCtrl / ⌘ + S
- Share this toolCtrl / ⌘ + Shift + S
- Reset the inputsAlt + R
- Open the tool search paletteCtrl / ⌘ + K
Related tools
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
TOTP Generator
Security
Generate time-based one-time passcodes from a Base32 secret.
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Frequently asked questions
Read more
- How TOTP two-factor codes actually work (and why 30 seconds matters)
A six-digit code every half minute, no network required. Here is what HMAC-SHA1, a shared secret and the Unix timestamp are actually doing.
- Password entropy explained: why passphrases beat symbols, and what the crack-time number means
Length beats complexity, entropy is measurable, and pronounceable passwords have a place. A practical guide to generating passwords you can actually use.
Version 1.0.0 · Updated 2026-08-09 · Runs entirely in your browser