DocsUser GuideSecure Password Generator
Secure Password Generator
Create strong, unique credentials for every account. The generator works in the app and browser extension, and supports site-specific rules, passphrases, and policy presets.
Quick Start
- Open New → Login or edit an existing one.
- Click Generate and pick Random or Passphrase.
- Tune length & symbols to match the site’s rules.
- Insert into the password field or copy once to clipboard.
- Save the item; the new value is encrypted locally and synced.
Random Mode
- Recommended: 16–24 characters
- Include digits and symbols; exclude look-alikes if needed
- Meets most modern site requirements
Use for critical accounts (email, cloud, banking).
Passphrase Mode
- 4–6 words with separators (e.g.,
river-owl-museum-logic
) - Easy to type; good for devices with strict symbol rules
- Add optional digits/symbols to satisfy validators
Site-Specific Rules
- Length slider (8–64+)
- Toggle symbols; set allowed symbol set
- Exclude similar chars: O/0, l/1, S/5, etc.
- Require at least N digits/uppercase
Policy Presets
- Strong (default): 20 chars, mixed classes
- Strict Enterprise: 24 chars, no ambiguous, min classes
- Legacy: 16 chars, limited symbols
Admins can enforce presets in Team Spaces.
Matching & Autofill
- Add the exact domain/subdomain to the item
- Use inline generator on sign-up forms
- Disable other managers to avoid conflicts
Clipboard Safety
- One-time copy with auto-clear (e.g., 30–90s)
- Prefer direct fill from generator to fields
- Do not paste into chat/apps that sync history
Good Hygiene
- Unique password per site—never reuse
- Enable TOTP/2FA and store recovery codes
- Rotate after incidents or role changes
Rotation Workflow (Recommended)
- Open the site’s change-password page.
- Generate a new value → paste → confirm on site.
- Save the updated login and add a short change note.
- Invalidate old sessions/devices on the site.
Need to bulk rotate? Use CLI or tasks with webhooks for automation.
Troubleshooting
- Site rejects password: Limit symbols to
!@#$%_-.
or use passphrase. - No autofill prompt: Add exact domain/subdomain to the item.
- TOTP invalid: Ensure automatic time sync on all devices.
- Clipboard not clearing: Check auto-clear timer in Settings.
- Password exposed: Rotate immediately and update recovery codes.
- More help: Password Issues