Secure Password Generator
Strong passwords and passphrases, generated locally in your browser
Are my passwords sent anywhere? No. Everything is generated in this page, in your browser, with the Web Crypto API. The page makes no server calls and stores nothing: no cookies, no localStorage, no sessionStorage. Generated passwords exist only in memory and are gone when you close the tab.
How random are the passwords? Every character and word is picked with crypto.getRandomValues(), the browser's cryptographically secure random number generator. Picks use rejection sampling, so no character or word is favored over another.
What is a passphrase? A run of random words from the EFF Large Wordlist: 7,776 words, about 12.9 bits of entropy each. The default follows strict EFF Diceware, words separated by spaces, so six words give about 77 bits.
How is strength estimated? For character passwords it is the length times log2 of the character pool; for strict passphrases, the number of words times log2(7,776). The time-to-crack estimate assumes about a trillion guesses a second.
Can I use it offline? Yes. The generator is a single HTML file with nothing to install. Download Secure-Password-Generator.html from the GitHub repository and open it in any modern browser; it works without an internet connection.
Is it open source? Yes. The source is on GitHub under the MIT License.
Purpose. This tool generates strong, cryptographically secure passwords and passphrases.
Good uses. Accounts, service credentials, API tokens, Wi-Fi keys and anything else that needs a strong secret. The passphrase mode with EFF Diceware (7,776-word pool) is recommended for any credential you must memorize.
Data handling. This tool operates entirely client-side. No passwords, settings, or usage data are transmitted, logged, or stored. All generated values exist only in browser memory and are discarded when the tab is closed.
Handling. Don't share generated passwords over unencrypted channels such as email or chat. Store them in a password manager.
Offline copies. The generator is a single HTML file. Download it only from the project's GitHub repository, github.com/RadMageIRL/SecurePasswordGenerator, and check its SHA-256 against the value in the README.
Questions or problems? Open an issue on GitHub or email radmageirl@radmagelabs.com.