When to Use the PCFG Password Pattern Generator
Reach for the PCFG Password Pattern Generator when you want to show, not just tell, why a password is weak: it builds real example strings that follow the structures guessing models try first. It is a teaching and policy-testing tool, not a strength meter or a vault.
When it fits
It fits security-awareness sessions, password-policy reviews, and test-data creation. Sampling structures by real-world frequency shows, in one screen, why "letters then digits" and "all letters" cover most human passwords, and the L/D/S label beside each example makes the point concrete. The strong uniform-random mode gives you a safe contrast in the same place.
Common base structures at a glance
| Structure | Meaning | Example | Approx. share |
|---|---|---|---|
| L | Letters only | sunshine | ~34% |
| LD | Letters then digits | letmein123 | ~24% |
| D | Digits only | 12345678 | ~16% |
| LDS | Letters, digits, symbol | monkey99! | ~7% |
Shares are approximate, drawn from public analyses of leaked password sets; they are illustrative rather than a live measurement.
When to pick something else
If you only want to score a password you already have, use a strength checker. If you need a password to actually keep, generate one in the strong uniform-random mode and save it in a password manager. This tool never scores a pasted password, stores anything, or contacts a breach database - every string stays in your browser.
Why trust these tools
- Ten-plus years of web tooling. The freetoolonline editorial team has shipped browser-based utilities since 2015. The goal has never changed: get you to a working output fast, without an install.
- No install, no sign-up. Open a tool and get a working output in seconds - nothing to download and no account to create. Tools that need heavy processing run it on our service, so even a low-powered machine gets the job done.
- Analytics stops at the page view. We measure which pages get visited, not what you type or upload inside a tool. There is nothing to sign in to and no profile is attached to your input.
- Open-source core components. The processing engines underneath (libheif, libde265, pdf-lib, terser, clean-css, ffmpeg.wasm, and others) are public and audit-able. We link to each one in its tool page's footer.
- Free, with or without ads. All tools are fully functional without sign-up. The Disable Ads button in the header is always available if you need a distraction-free run.