Secure Password Generator
Cryptographically secure passwords and passphrases, generated with crypto.getRandomValues right on this page. Nothing is created on a server, sent anywhere, or stored — close the tab and it's gone.
About this tool
Every password comes from crypto.getRandomValues, the browser's cryptographically secure random number generator, with rejection sampling so no character is statistically favored. The entropy figure is the honest measure of strength — each extra bit doubles the average cracking effort — and the crack-time estimates show the average time to guess at three realistic attack speeds, from throttled online login attempts to a large offline GPU cluster. Passphrases draw from a 400-word list (about 8.6 bits per word) and are far easier to remember at comparable strength.
Generation happens entirely in your browser: there is no server-side step, no network request carrying your passwords, and nothing is logged or stored. Analytics on this page count visits only — they never see tool inputs or outputs. If you want to be extra careful, you can load the page, disconnect from the internet, and generate offline.