Frequently Asked Questions

Yes, completely. There is no signup, no paywall, no premium tier, and no upsell. The site is supported by unobtrusive ads and the occasional donation.

No. All password generation runs in JavaScript inside your browser. We have no backend that receives passwords. You can verify this by opening your browser DevTools network tab while generating a password — there will be no outbound request related to the password itself.

Random-mode passwords use the browser's built-in random source. With all character sets enabled at the default 32-character length, the resulting password has roughly 200 bits of entropy — orders of magnitude beyond brute-force feasibility on current and foreseeable hardware.

A passphrase is a sequence of common words separated by a delimiter — for example, "Happy-Tiger-Cloud-Robot". Passphrases are easier to type, easier to remember, and still very strong because their entropy grows with the size of the word list and the number of words. Use a passphrase whenever you have to type a password yourself rather than pasting it from a password manager.

Easy mode produces short, memorable passwords like "happymonkey42" — perfect for kids, classroom logins, and other low-stakes accounts where typeability matters more than maximum security. You can optionally enable leetspeak to swap letters for numbers and symbols.

When leetspeak is enabled in Easy mode, common letters get swapped: a→@, e→3, i→1, o→0, s→$, t→7, l→1. The result looks like "h@ppym0nk3y42". Note that attackers know these substitution rules, so leetspeak alone does not make a password secure — length is what matters.

For typical accounts: 16+ random characters or 4+ word passphrases. For high-value accounts (primary email, banking, crypto, password-manager master): 20+ random characters or 5+ word passphrases. Length matters far more than complexity.

Yes. Toggle Generation Mode from Single to Batch, pick a count (10, 50, 100, or any custom number up to 1,000), and click Generate. You can then Copy All to clipboard or Download as a .txt file.

The Avoid Ambiguous Characters option removes characters that look alike across common fonts: 0/O, 1/l/I. This reduces typos when a password has to be transcribed by hand.

No. We do not store, log, or transmit generated passwords. Anonymous analytics record interaction events (e.g., "user changed mode to passphrase"), never the password content.

Once loaded, password generation runs entirely in your browser. You can disconnect your network and keep generating passwords. The site itself does need to be initially loaded online.

Use the contact form linked in the footer. Bug reports with steps to reproduce are very welcome.