// password generator
Character, passphrase, pronounceable, or PIN — every password is built with a cryptographically secure random source and scored with real entropy math, not a green checkmark.
Create several passwords at once using the settings above — useful for provisioning multiple accounts.
Type any password to score it instantly. This runs entirely in your browser — nothing is sent anywhere, logged, or stored.
Every password comes from crypto.getRandomValues — your browser's cryptographically secure random number generator — with rejection sampling to eliminate bias, not a simple pseudo-random function.
Generation, scoring, and the strength checker all run entirely client-side. No password is transmitted, logged, or stored on any server, ever.
The strength meter shows actual bits of entropy and penalizes common weak patterns — dictionary words, keyboard walks, repeats — so the score means something.
Yes — every password is generated using the Web Crypto API's cryptographically secure random number generator, the same class of randomness used in real security software, not a simple pseudo-random function.
No. Generation, strength scoring, and the password checker all run entirely in your browser using JavaScript. Nothing is transmitted, logged, or stored anywhere.
Character mode gives fully random strings from your chosen character sets; passphrase mode gives random real words; pronounceable mode gives random but sayable syllable patterns; PIN mode gives random digits only.
By entropy — the mathematical measure of how many guesses a brute-force attack would need — combined with penalties for common weak patterns like dictionary words, keyboard walks, and repeated characters.