DocsUser GuideSecure Password Generator

Secure Password Generator

Create strong, unique credentials for every account. The generator works in the app and browser extension, and supports site-specific rules, passphrases, and policy presets.

Quick Start

  1. Open New → Login or edit an existing one.
  2. Click Generate and pick Random or Passphrase.
  3. Tune length & symbols to match the site’s rules.
  4. Insert into the password field or copy once to clipboard.
  5. Save the item; the new value is encrypted locally and synced.

Random Mode

  • Recommended: 16–24 characters
  • Include digits and symbols; exclude look-alikes if needed
  • Meets most modern site requirements

Use for critical accounts (email, cloud, banking).

Passphrase Mode

  • 4–6 words with separators (e.g., river-owl-museum-logic)
  • Easy to type; good for devices with strict symbol rules
  • Add optional digits/symbols to satisfy validators

Site-Specific Rules

  • Length slider (8–64+)
  • Toggle symbols; set allowed symbol set
  • Exclude similar chars: O/0, l/1, S/5, etc.
  • Require at least N digits/uppercase

Policy Presets

  • Strong (default): 20 chars, mixed classes
  • Strict Enterprise: 24 chars, no ambiguous, min classes
  • Legacy: 16 chars, limited symbols

Admins can enforce presets in Team Spaces.

Matching & Autofill

  • Add the exact domain/subdomain to the item
  • Use inline generator on sign-up forms
  • Disable other managers to avoid conflicts

Clipboard Safety

  • One-time copy with auto-clear (e.g., 30–90s)
  • Prefer direct fill from generator to fields
  • Do not paste into chat/apps that sync history

Good Hygiene

  • Unique password per site—never reuse
  • Enable TOTP/2FA and store recovery codes
  • Rotate after incidents or role changes

Rotation Workflow (Recommended)

  1. Open the site’s change-password page.
  2. Generate a new value → paste → confirm on site.
  3. Save the updated login and add a short change note.
  4. Invalidate old sessions/devices on the site.

Need to bulk rotate? Use CLI or tasks with webhooks for automation.

Troubleshooting

  • Site rejects password: Limit symbols to !@#$%_-. or use passphrase.
  • No autofill prompt: Add exact domain/subdomain to the item.
  • TOTP invalid: Ensure automatic time sync on all devices.
  • Clipboard not clearing: Check auto-clear timer in Settings.
  • Password exposed: Rotate immediately and update recovery codes.
  • More help: Password Issues