Generate cryptographically random passwords using the browser’s native crypto API. Nothing is transmitted or logged.
Uses the browser's crypto.getRandomValues() API. No server calls. Nothing logged.
Generates strong, random passwords using the Web Crypto API for cryptographically secure randomness. Configurable length and character sets. All generation happens client-side — no passwords are transmitted or stored anywhere.
Provides an entropy estimate for the generated password based on length and character pool size, so you can see exactly how much randomness you are working with.
Password strength matters most at the margins: for accounts without MFA, for local admin accounts, for service accounts that can't use modern authentication, and for encryption passphrases where the password is the only protection layer.
For most user accounts, a unique password stored in a password manager matters more than the specific strength of the password. The goal is non-reuse — a breached password from one service should not work anywhere else.