Password Generator

Build Hashcat-compatible wordlists from mask patterns or your own lists, with transformation rules — all in your browser via WebAssembly.

FreeNo sign-upRuns locally — files never leave your device

How to use this tool

The Password Generator creates custom password wordlists using either predefined wordlists or mask patterns — perfect for security testing, password analysis and generating Hashcat-compatible wordlists directly in your browser using WebAssembly.

How to use

Choose your mode – "Wordlist" (upload or paste passwords) or "Mask Builder" (patterns like ?u?l?l?d?d).
Configure settings – set maximum length, output delimiter and advanced options like ASCII-only mode and batch size.
Apply transformation rules – optionally uppercase, lowercase, capitalize, reverse, leetspeak, prepend/append and more.
Generate – click "Start Generation" and monitor progress in real time.
Download – once complete, download your wordlist as a text file.

Configuration

Max Password Length Maximum length for generated passwords (1-128 characters). Output Delimiter Separator between passwords. Use \n for newline, \t for tab.

Advanced Settings

ASCII Only Mode When enabled, rejects non-ASCII characters in wordlists and masks. Disable for international character support. Batch Size Number of passwords processed per iteration. Higher values = faster generation but more memory usage.

Source Mode

Wordlist Mask Builder

Wordlist Source

Upload Wordlist File Plain text file with one password per line (.txt, .list, .dic).

Or Enter Manually Type or paste passwords, one per line.

Wordlist Options

Skip First N Entries Skip this many passwords from the start of the wordlist. Limit to N Entries Process at most this many passwords (leave empty for all). Remove Duplicates Automatically filter out repeated entries.

Mask Builder

Mask Pattern Use placeholders like ?l (lowercase), ?u (uppercase), ?d (digit), ?s (special), ?a (any printable). Wrap literal blocks in braces to keep them constant (e.g., ?d{2024}?u). Example: ?u?l?l?l?d?d?d = Abcd123

Mask Placeholder Reference

Mask placeholders define which characters can appear at each position. Combine them to create complex password patterns.

?l: Lowercase letters (a-z) — e.g. ?l?l?l → abc, xyz, dog
?u: Uppercase letters (A-Z) — e.g. ?u?u?u → ABC, XYZ, DOG
?d: Digits (0-9) — e.g. ?d?d?d?d → 0000, 1234, 9999
?s: Special characters (!@#$%^&*...) — e.g. ?s?s → !@, #$, *&
?a: All printable ASCII (letters, digits, special) — e.g. ?a?a → aZ, 1!, @#
?h: Lowercase hexadecimal (0-9a-f) — e.g. ?h?h?h → 0a1, fff, c3e
?H: Uppercase hexadecimal (0-9A-F) — e.g. ?H?H?H → 0A1, FFF, C3E
?1-?4: Custom character sets (define in Advanced Options below) — e.g. ?1?1?1 where ?1=abc → aaa, abc, ccc
{literal}: Constant string inserted verbatim without consuming mask slots — e.g. ?d{XYZ}?u → 0XYZA, 1XYZB

Tip: combine placeholders and constant blocks for realistic patterns. ?u{2024}?l?l?d generates passwords like "P2024as5", "R2024ed7".

Min Length Minimum password length to generate. Max Length Maximum password length to generate.

Advanced Mask Options

Incremental Mode Generate passwords starting from minimum length up to maximum length.

Skip First N Skip this many combinations from the start. Limit to N Generate at most this many passwords (leave empty for all). Auto-deduplicate Automatically enabled. Ensures consistent output order.

Custom Character Sets (?1-?4)

Define up to 4 custom character sets to use in your mask with ?1, ?2, ?3, ?4.

?1 Custom Charset ?2 Custom Charset ?3 Custom Charset ?4 Custom Charset

Transformation Rules

Apply rules to transform generated passwords. Rules marked as incompatible will automatically disable each other.

Transformation Rules Guide

Transformation rules modify passwords according to Hashcat rule syntax. Use them to create password variations automatically.

Uppercase: Converts all letters to UPPERCASE (password → PASSWORD).
Lowercase: Converts all letters to lowercase (PASSWORD → password).
Capitalize: First letter uppercase, rest lowercase (password → Password).
Toggle Case: Inverts the case of every letter (Password → pASSWORD).
Reverse: Reverses the entire password (password → drowssap).
Duplicate: Repeats the password twice (password → passwordpassword).
Reflect: Appends the password in reverse (password → passworddrowssap).
Leetspeak: Replaces letters with similar numbers/symbols (password → p@55w0rd). a→@, e→3, i→1, o→0, s→5, t→7.

Rule compatibility: case transformation rules (Uppercase, Lowercase, Capitalize, Toggle Case) are mutually exclusive — selecting one deselects the others.

Custom Transformations

Prepend Text Add text at the beginning of each password (e.g., "admin_" → admin_password). Append Text Add text at the end of each password (e.g., "123" → password123).

Preset Rules

Generate Wordlist

How to generate a wordlist

Choose your mode

Pick Wordlist mode (upload or paste passwords) or Mask Builder mode (patterns like ?u?l?l?d?d).
Configure settings

Set the max length, delimiter and advanced options such as ASCII-only mode and batch size.
Apply rules

Optionally transform passwords: uppercase, reverse, leetspeak, prepend/append and more.
Generate & download

Click Start Generation, watch live progress, then download the wordlist as a text file.

Generate powerful password wordlists

Our Password Generator is a powerful tool designed to create custom password wordlists using either predefined wordlists or mask patterns. Whether you're a security professional, penetration tester, or password researcher, this tool helps you generate Hashcat-compatible wordlists entirely in your browser.

Why use our password generator?

Fast in-browser generation powered by WebAssembly – no server uploads needed.
Support for both wordlist mode and advanced mask patterns.
Apply Hashcat-style transformation rules for password variations.
Export generated wordlists as text files with real-time progress tracking.

Start now and create professional password wordlists with our privacy-focused, high-performance tool. It's fast, secure, and processes everything locally in your browser.

Online password wordlist generator - create custom Hashcat wordlists

Whether you're conducting security testing, password analysis, or research, having the right wordlist is crucial. Our Password Generator lets you create custom password wordlists using wordlists or mask patterns, with advanced transformation rules for maximum flexibility.

What can you generate?

Wordlist mode: upload or paste existing passwords and apply transformation rules to create variations.
Mask builder: use placeholders like ?u?l?d?s to generate passwords based on character patterns.
Transformation rules: apply case changes, reversing, leetspeak, duplication, and custom text additions.
Custom character sets: define your own character sets for advanced mask patterns.

Understanding mask patterns

Mask patterns use placeholders to define password structures: ?l lowercase (a-z), ?u uppercase (A-Z), ?d digits (0-9), ?s special characters, ?a all printable ASCII. Example: the mask ?u?l?l?d?d?d generates passwords like "Abc123", "Xyz789".

Why generate password wordlists?

Security testing: audit password strength and test authentication systems.
Penetration testing: generate targeted wordlists for password cracking exercises.
Password research: analyze password patterns and common variations.
Compliance testing: verify that systems enforce strong password policies.

Privacy & security

All password generation happens entirely in your browser using WebAssembly technology. Your wordlists and data are never uploaded to any server, ensuring complete privacy and security.

Explore More Tools

Frequently asked questions

What is a password wordlist?

A password wordlist is a text file containing a collection of passwords or password candidates, commonly used in security testing and password analysis.

What are mask patterns?

Mask patterns use placeholders like ?u (uppercase), ?l (lowercase), and ?d (digit) to define password structures. For example, ?u?l?l?d?d generates passwords like "Abc12".

Can I download the generated wordlist?

Yes, you can download your generated wordlist as a text file once generation is complete.

Is this tool free to use?

Yes, our Password Generator is completely free with no hidden charges or subscriptions.

How is this tool useful for security professionals?

Security professionals can use this tool to generate custom wordlists for password auditing, penetration testing, and security assessments, with full control over password patterns and transformations.

–

Was this page helpful?

Loading ratings…

Rate this page

All development tools →

JS Interpreter Write and run JavaScript in a sandboxed online editor. JS Comment Remover Strip comments from JavaScript and highlight the result. APK Explorer Inspect Android APK files: manifest, permissions, resources. WASM Explorer Explore the structure of WebAssembly modules.