Password Policy Generator

Generate password policy rules, regex and copy for NIST or PCI presets.

Works Offline
Privacy First
No Login
No API

Requirements

Generated policy

- Minimum length: 14 characters
- Must contain at least one uppercase letter (A-Z)
- Must contain at least one lowercase letter (a-z)
- Must contain at least one digit (0-9)
- Must contain at least one symbol
- Must be changed every 90 days
- Cannot reuse the last 10 passwords

About the Password Policy Generator

Configure length, character classes, rotation and history rules to produce a written password policy, a matching validation regex and implementation notes.

Examples

Example

min 14 chars, all classes

Output

^(?=.*[A-Z])(?=.*[a-z])(?=.*\d).{14,}$

Related tools

Frequently asked questions

Version 1.0.0 · Updated 2026-08-09 · Runs entirely in your browser