How the generator works
Choose a length and character sets. The browser creates random bytes with the Web Crypto API and builds the password on your device.
Everything happens on this device
Creates passwords locally in your browser. No backend, logs or analytics.
Choose a length and character sets. The browser creates random bytes with the Web Crypto API and builds the password on your device.
Local generation removes unnecessary risk: the password does not travel over the network, reach server logs, or pass through backend code.
For everyday accounts, 16 characters is a reasonable minimum. For finance, admin panels, and critical services, use 20-32 characters and a password manager.
This option removes characters such as O, 0, I, and l. It reduces mistakes when a password must be dictated, retyped, or stored manually.
Different services have different restrictions. Profiles help choose length and characters for an everyday account, banking, servers, or recovery codes.
Server-side generation creates another point of trust. A password is safer when the secret appears only in the browser and stays with you.