Password Generator

Generates strong, pronounceable, and passphrase-style passwords with real-time entropy scoring & 100% client-side security.

Strength: Strong 0 bits entropy
Est. crack time: — (offline attack: 1010/sec)
Include Character Sets
Advanced Rules & Exclusions
L = Uppercase (A–Z) l = Lowercase (a–z) # = Number (0–9) @ = Symbol ? = Any Character
0 items
Click 'Generate Bulk List' to create passwords in batch.
In-memory only (cleared on refresh)
No session history yet.

FAQ

How are my passwords generated securely?

All passwords are generated 100% client-side in your browser using the standard Web Crypto API (window.crypto.getRandomValues()) combined with rejection sampling to eliminate modulo bias. No values are ever transmitted to any server.

What is entropy and how is it calculated?

Password entropy measures randomness in bits: \(E = \log_2(\text{pool size}^\text{length})\). Higher entropy means exponential protection against brute-force attacks. 60+ bits is strong, and 120+ bits is rated Beast mode.

What are Passphrases and why are they recommended?

Passphrases combine multiple random words (e.g. correct-horse-battery-staple). They are easier for humans to remember while offering massive entropy due to large wordlists.

Are generated passwords saved in my browser history or localStorage?

No. Generated passwords are never saved to permanent storage or history. Only your settings configuration (like favorite pattern rules) is stored locally if you click "Save Preset". Session history lives in transient memory and vanishes when the page reloads.

Password Generator Guide

Welcome to the Password Generator guide! Here is how to create, format, and audit secure credentials.

1. Generation Modes

2. Security & Entropy

All random bytes use window.crypto.getRandomValues(). Real-time metrics show bit entropy and estimated offline crack time.