How the generator works
Choose a length and character sets. The browser creates random bytes with the Web Crypto API and builds the password on your device.
Everything happens on this device
Creates passwords locally in your browser. No backend, logs or analytics.
Choose a length and character sets. The browser creates random bytes with the Web Crypto API and builds the password on your device.
Local generation removes unnecessary risk: the password does not travel over the network, reach server logs, or pass through backend code.
The purpose sets a clear full-search target: a few years for a one-time service, decades for social and AI accounts, and 100+ years for critical accounts.
This option removes characters such as O, 0, I, and l. It reduces mistakes when a password must be dictated, retyped, or stored manually.
Accounts have different value. Profiles cover one-time services, social networks, government, banking, AI, primary email, servers, and recovery codes.
Server-side generation creates another point of trust. A password is safer when the secret appears only in the browser and stays with you.