Generated in your browser. Nothing is sent or stored. Clipboard auto-clears after 60 seconds where the browser allows it.
Passphrase settings
Number of words4
38
More words = stronger and harder to guess. Four is the sensible default.
Numbers at the end2
06
Optional. Adds a small extra layer of entropy. Set to 0 if you do not want any.
Separator between words
Capitalisation
Which mode for what
Two ways to make a password, both genuinely safe.
Passphrase
For passwords you actually have to type.
Four common words joined together, lightly capitalised, with an optional couple of digits on the end. Looks like Otter-Lantern-Beach-Twig47. The UK's National Cyber Security Centre recommends this style for accounts you log into regularly: email, work sign-ins, your password manager itself.
Memorable. You can type it without copying and pasting.
Strong by length. Even a fast attacker would need thousands of years.
Word list is curated and friendly. No swearing, no jargon, no homophones.
Random characters
For passwords your password manager remembers.
Sixteen to twenty characters from across the keyboard. Looks like 7v$Lk2.eP9!nQrJm. More entropy per character than any passphrase. Not for typing by hand. Pair this with a password manager (1Password, Bitwarden, your browser's built-in one) and let it handle the input.
Strongest option per character. Sixteen characters equals roughly 100 bits of entropy.
Adjustable: pick which character classes are in, exclude look-alike pairs like 0/O if you like.
Guaranteed at least one of each enabled class, so it always passes site rules.
Both modes use the browser's cryptographic random number generator, not the insecure default. Both produce passwords that have never existed before in any database.
Privacy, briefly
Generated in your browser. Never sent anywhere.
No network call to generate
The generator runs entirely in JavaScript in your browser. No password ever leaves your device.
No analytics on the output
We have analytics on which pages you visit, but the generated password itself is never read or sent.
Clipboard wipes after 60 seconds
When you press Copy, we set a 60-second timer to clear your clipboard. Some browsers block background writes, so paste sooner if you can.
No history kept
Reload the page and the previous password is gone. We do not keep a log of generated passwords anywhere.
A password manager is the single biggest security upgrade most people can make. We can set one up with you and walk you through getting your existing logins into it.
