Password Generator

Yes. Every password comes from the secure random generator in your browser (crypto.getRandomValues), the one made for cryptography. Each character or word is picked with the same chance as every other, with no modulo bias. The code runs on your device, and the page never sends the password anywhere.

Your movement adds randomness that does not come from the computer itself. The tool mixes the position and exact timing of each move, and the timing of key presses, with 32 fresh secure random bytes through HKDF-SHA-256. Because the secure bytes are always part of the mix, your movement can only add strength. It is never needed, and it never weakens the result. The key you press is not recorded, only the time.

No. The password exists only in this browser tab. It is not sent to a server, not stored in cookies or local storage, and not written to any log. When you close the tab, it is gone. The site uses Google Analytics to count visits (see the privacy policy), but the generator gives it no data about your password.

Use a random password when a password manager or your browser will remember it for you. Use a passphrase when you have to remember or type it yourself, for example for your computer login or your password manager. Six random words from the 7,776-word EFF list give about 77 bits of strength and are much easier to type than 12 random characters of about the same strength.

For a random password, 16 characters or more is a good choice; the default here is 20. For a passphrase, use at least 6 words. Most important: use a different password for every account, so one leak does not open your other accounts.

Bits measure how many different passwords the generator could have made with your settings. Each extra bit doubles the number of guesses an attacker needs. The meter shows Weak below 45 bits, Fair below 60, Strong below 80 and Very strong from 80 bits. The number assumes that the attacker knows your settings, so it is honest even in the worst case.

Yes. It works in any modern browser on phone, tablet or computer. On a phone, move your finger over the box to add your movement. After the page has loaded, it keeps working when you go offline.