Design a modern, NIST-aligned password policy — get the document, the JSON, and a checker that tests passwords against it.
Pick the rules below and the generator writes the policy document for you — the same page also tests passwords against it. Modern guidance (NIST SP 800-63B) favours length over complexity theatre: long passphrases, no forced rotation without a reason, and blocking known-breached passwords. The defaults here follow that.
Test a password against the policy designed above. Everything runs locally in this page — nothing is sent or stored. Use sample passwords, not real ones you rely on.
Policies you have designed for your team, club or clients. Records live under your local account (or guest space) on this device — create, view, edit and delete them any time.