[ Cryptographic password generator ]
A protective thread
for every login.
No servers. No telemetry. No trace. Real randomness from the Web Crypto API, forged entirely on your device.
Open source · MIT · Auditable
[ Why not the browser's built-in generator? ]
Fully local, fully auditable
Open source — read the exact code that generates your passwords, instead of trusting a closed box tied to your account.
You control the entropy
8 to 32 characters, symbols on or off, up to ~209 bits — not whatever length the browser happened to pick for you.
Built for places autofill can't reach
Easy Type mode makes strong passwords genuinely typeable on a console, a smart TV, or any screen without your account signed in.
No account lock-in
Works identically whether or not you're signed into a Google, Microsoft, or Mozilla account. Nothing syncs anywhere.
Easy Type Mode
Syllable patterns produce 20-character passwords that are genuinely easy to type — on a phone, a console, or a smart TV. Strong without the struggle.
Max Security Mode
Fully random, 8 to 32 characters, optional symbols. Rejection sampling removes modulo bias so the distribution stays perfectly uniform — up to 209 bits of entropy.
Zero Data, Fully Offline
No network requests, no analytics, no storage. Everything happens locally in your browser, and the whole algorithm is open source and auditable.
- → crypto.getRandomValues
- → no telemetry
- → manifest v3
- → open source