Your passwords are generated entirely in your browser. Nothing is ever sent to a server or stored anywhere.

Frequently Asked Questions

Is it safe to type my real password here?

Yes. This tool runs entirely in your browser using JavaScript. Your password is never sent to any server, never logged, and never stored. You can verify this by disconnecting from the internet — the tool still works.

What is password entropy?

Entropy measures the randomness of a password in bits. Higher entropy = harder to crack. A password's entropy depends on its length and the size of its character set. For example, a 16-character password using uppercase, lowercase, numbers, and symbols has about 105 bits of entropy.

How is crack time estimated?

Crack time assumes an attacker using a modern GPU cluster capable of 10 billion guesses per second. Real crack time depends on the attack method — online attacks are much slower due to rate limiting, while offline attacks against weak hashes can be faster.