To view this page, you should have the most recent Java installed
32-bit JRE (Java Runtime Environment) 1.8.0_20.
This Applet will run online in your browser, but it is a hybrid you
can also download, install and run it on your own machine as standalone
application. It will start and run faster if you do that. It will also
work safely even if you have disabled Java in your browser.
Make sure you paste the generated passwords somewhere for safekeeping. Doing this also helps verify the value you are pasting blind into web forms.
The Australian government recommends changing passwords frequently, at least twice a year, to prevent identity theft, and using unguessable passwords at least 8
characters long with a mixture of digits and both upper and lower case letters. The password generator defaults to 10 characters. The Australians celebrate a special day
in early June to change their passwords.
Don’t use the same password at multiple sites unless you don’t care at all about the security of any of them.
A word in the dictionary can be cracked in under a second. That is no security at all.
Password is free. You may generate as many passwords as
Password is easy to use. You can select your own
balance of convenience and security, deciding if you want your password to include
digits, lower case letter, upper case letters and/or punctuation.
Password avoids generating passwords with the
characters 0 O 1 l I | in them because they are so easily confused.
Password is more secure than other password generators
because your password is never sent over the Internet, or stored, even temporarily, on
a server. Of course, once you receive it, security is up to you.
Internally, Password uses Oracle’s high security
encryption-grade random number generators.
You, or an expert, can inspect the source code for Password to be sure there is no possible way it can leak your
You, or an expert can use Wireshark, to confirm that Password sends no information to any server. Most other password
generators have to do this, legitimately, since a server does the calculations to
generate the password.
In a highly secure situation, you can run Password as
an application on a secure computer without access to the Internet. It will run on
pretty was any computer — anything that supports Java.
You must install a recent Java JVM (Java Virtual Machine)
on your computer and engage it in your browser.
You must specially grant permission for it to run.
is a signed Java Applet (that can also be run as an application)
to Password Generator.
You are welcome to install it on your own website.
If it does not work…
For this Applet hybrid to work, you must click grant/accept/always run on this site/I accept the risk
to give it permission to let you copy/paste.
If you refuse to grant permission, the program may crash with an inscrutable stack dump
on the console complaining about AccessController.checkPermission.
In the Java Control Panel security tab,
click Start ⇒ Control Panel ⇒
Programs ⇒ Java ⇒ Security, configure medium security
to allow self-signed and vanilla unsigned applets to run.
If medium is not available, or if Java security is blocking you from running the program,
configure high security
and add http://mindprod.com
to the Exception Site List at the bottom of the security tab.
Often problems can be fixed simply by clicking the reload button on your browser.
Make sure the Java in your browser is enabled in the security tab of the Java Control panel.
Click Start ⇒ Control Panel ⇒
Programs ⇒ Java ⇒ Security ⇒
Enable Java Content in the browser.
This signed Java Applet (that can also be run as an application)
needs 32-bit or 64-bit Java 1.7 or later.
For best results use the latest 1.8.0_20 Java.
It works under any operating system that supports Java
e.g. W2K XP W2003 Vista W2008 W7-32 W7-64 W8-32 W8-64 W2012 Linux LinuxARM LinuxX86 LinuxX64 Ubuntu Solaris SolarisSPARC SolarisSPARC64 SolarisX86 SolarisX64 OSX
You should see the Applet hybrid above looking much like this
If you don’t, the following hints should help you get it working:
If the above Applet hybrid appears to freeze-up, click
Alt-Esc repeatedly to check for any buried permission dialog box.
If you have certificate troubles,
check the installed certificates
and remove or update any obsolete or suspected defective certificates.
The only certificate used by this program is mindprodcert2014dsa.cer.
Especially if this Applet hybrid has worked before, try clearing the browser cache and rebooting.
To ensure your Java is up to date, check with Wassup.
First, download it and run it as an application independent of your browser,
then run it online as an Applet to add the complication of your browser.
If the above Applet hybrid does not work,
check the Java console for error messages.
If the above Applet hybrid does not work, you might have better luck with the downloadable version available below.
If you are using Mac OS X and would like an improved Look and Feel,
download the QuaQua look & feel
UnZip the contained quaqua.jar
and install it in ~/Library/Java/Extensions
or one of the other ext dirs.
Click the Information bar, and then click Allow blocked content. Unfortunately, this also allows dangerous ActiveX code to run. However, you must do this in order to get access to perfectly-safe Java Applets running in a sandbox. This is part of Microsoft’s war on Java.
Try upgrading to a more recent version of your browser,
or try a different browser e.g. Chrome, Firefox, SeaMonkey, Opera, Safari or Avant.
If you still can’t get the program working
click the red HELP button below for more detail.
If you can’t get the above Applet hybrid working
after trying the advice above and from the red HELP button below,
have bugs to report or ideas to improve the program or its documentation,
please send me an email at.
Password Generator is free. Full source included.
You may even include the source code, modified or unmodified
in free/commercial open source/proprietary programs that you write and distribute. Non-military use only.
For the Paranoid
Unlike most other generators, passwords generated by my Applet are never sent over the
net, where they could in theory be snooped on, particularly by an agency of the American
government who have legal and mathematical abilities to crack pretty well anything they
please. Passwords are generated in your machine and never leave your machine. Any
password generator could in theory retain a copy of the password that it gave you and
pass it on to the bad guys. You must trust the author. In the case of my Password
generator, you can download the source, examine it for any back doors, or have a
programmer friend do so, compile it yourself and run it offline.