Runs entirely in your browser. Nothing you enter is sent anywhere or stored.

How to use it

Pick a passphrase (random words) or a password (random characters), set the length, and copy the result into your password manager.

How this works

  • Uses your browser's WebCrypto random number generator (crypto.getRandomValues), not Math.random.
  • I pick each character or word with rejection sampling, so every choice is equally likely. There is no modulo bias.
  • The entropy figure assumes an attacker knows exactly how the secret was made, including the wordlist. Six words gives about 77 bits.
  • When you ask for every character type, I throw away candidates that miss one and try again. The entropy shown is the exact count for that rule.
  • Nothing is sent, logged or stored. Close the tab and it is gone.
  • Passphrase wordlist by the Electronic Frontier Foundation (EFF), CC BY 4.0. I removed the dice numbers; the words are unchanged.