Password Policy Generator

Generate password policy rules, regex and copy for NIST or PCI presets.

Support
Works Offline
Privacy First
No Login
No API

Requirements

Generated policy

- Minimum length: 14 characters
- Must contain at least one uppercase letter (A-Z)
- Must contain at least one lowercase letter (a-z)
- Must contain at least one digit (0-9)
- Must contain at least one symbol
- Must be changed every 90 days
- Cannot reuse the last 10 passwords

About the Password Policy Generator

Configure length, character classes, rotation and history rules to produce a written password policy, a matching validation regex and implementation notes.

Examples

Example

min 14 chars, all classes

Output

^(?=.*[A-Z])(?=.*[a-z])(?=.*\d).{14,}$

Keyboard shortcuts

  • Copy the main outputCtrl / ⌘ + Shift + C
  • Download the resultCtrl / ⌘ + S
  • Share this toolCtrl / ⌘ + Shift + S
  • Reset the inputsAlt + R
  • Open the tool search paletteCtrl / ⌘ + K

Related tools

Frequently asked questions

Version 1.0.0 · Updated 2026-08-09 · Runs entirely in your browser