Generate strong random passwords with configurable length, character sets, and exclusion rules; create memorable passphrases; check password strength; hash passwords with bcrypt/Argon2.
Character sets
Passwords are generated entirely in your browser — nothing is sent to a server. Use the strength meter and policy checker to verify requirements before using.
Generate strong random passwords with configurable length, character sets, and exclusion rules; create memorable passphrases; check password strength; hash passwords with bcrypt/Argon2.
No, with one deliberate exception: the Leak Check tab sends a 5-character SHA-1 hash prefix (never the real password) to HaveIBeenPwned's API — see the note on that tab. Every other tab is fully local.