Tool
Password and passphrase generator
Runs entirely in your browser. Nothing you enter is sent anywhere or stored.
How to use it
Pick a passphrase (random words) or a password (random characters), set the length, and copy the result into your password manager.
How this works
- Uses your browser's WebCrypto random number generator (
crypto.getRandomValues), notMath.random. - I pick each character or word with rejection sampling, so every choice is equally likely. There is no modulo bias.
- The entropy figure assumes an attacker knows exactly how the secret was made, including the wordlist. Six words gives about 77 bits.
- When you ask for every character type, I throw away candidates that miss one and try again. The entropy shown is the exact count for that rule.
- Nothing is sent, logged or stored. Close the tab and it is gone.
- Passphrase wordlist by the Electronic Frontier Foundation (EFF), CC BY 4.0. I removed the dice numbers; the words are unchanged.