Password Generator
Generate strong random passwords or easy-to-type passphrases, entirely in your browser.
[local] Runs in your browser. Nothing you enter leaves your device.
How it works
Everything happens in your browser using crypto.getRandomValues(), the same
secure random number generator browsers use for encryption keys. Nothing is sent or stored
anywhere.
Passwords
Each character is picked at random from the character types you choose, with at least one of each type included. A small trick called rejection sampling makes sure every character is exactly as likely as every other.
Passphrases
Passphrases are several random words, like bunny-oxidize-grimy-recital-dust-shiny
. They're much easier to remember and type than a jumble of symbols, and just as strong: each
word comes from a list of 7,776 words, so six words give about 77 bits of entropy. This is the
diceware method, using the
EFF Large Wordlist (by the Electronic Frontier
Foundation, CC BY 3.0 US).
What's "entropy"?
Entropy (in bits) measures how many guesses an attacker would need if they knew exactly how your password was made. Every extra bit doubles the work. Around 60 bits is fine for most accounts; aim for 80+ for anything important, like a password manager's master password.
The best setup: a password manager (Bitwarden, KeePassXC, ...) with a strong passphrase as the master password, random passwords for everything else, and two-factor authentication.