Secrets, and proof
The tools filed here look unrelated until you notice what they share.
The password generator makes a secret that nobody can guess. The draw verifier proves that a result nobody could predict was also not quietly chosen after the fact. Each is a question about randomness — one about keeping it secret, one about being able to demonstrate it was real.
That second question is the one most sites skip. A giveaway, a raffle, an allocation of shifts: the organiser knows the draw was honest, and everyone else has to take their word for it. A seed plus a fingerprint turns “trust me” into something a participant can check for themselves.
Which to reach for
Making a credential — a login password, a passphrase you have to type from memory, a numeric PIN, or an API key for a config file. All four come out of the password generator, which also shows the entropy and an estimated time to crack, so the length you pick is an informed choice rather than a guess.
Checking a draw someone else ran — paste the certificate into the draw verifier. It recomputes the result from the seed and compares the fingerprint. If either disagrees, the numbers were changed after the draw.
Why generating a password here is not a contradiction
Fetching a password from a website sounds like the worst possible way to get one. It usually is: if the value is generated on a server, it existed on someone else’s machine before it existed on yours, and you have no way to know what happened to it there.
Nothing is generated on a server here. The characters come from
crypto.getRandomValues(), the browser API backed by your operating system’s
entropy pool — the same source your browser uses to negotiate HTTPS. The page
makes no network request while you use it. You can confirm that by opening the
network tab in developer tools, generating a password, and watching nothing
happen. If you would rather not take even that on trust, disconnect from the
network first; the tool keeps working.
What this category deliberately does not include
There is no password strength checker that you paste an existing password into. Typing a real password into a web form to be “checked” is a bad habit regardless of what the site promises, and the generator already shows entropy for the passwords it creates.
There is no breach lookup, no password manager and no hashing tool. For a manager, use a dedicated one — Bitwarden, 1Password and KeePass all solve the problem this site cannot, which is remembering the passwords for you. For breach checking, Have I Been Pwned is the reference.