Password toolkit

Strong passwords. Real entropy. Never on a server.

Generate random passwords, Diceware passphrases, or PINs — with entropy shown in bits. Bulk mode for credential rotations. Everything runs in your browser.

Try it now See plans

Plans from $9/mo — cancel any time

Live — works right here

For people who take passwords seriously

Built for sysadmins, security engineers, and anyone rotating creds on schedule.

Cryptographically secure

Uses crypto.getRandomValues() — never Math.random(). Same RNG your browser uses for TLS.

Entropy in bits

Every output shows actual entropy (bits). See exactly how strong each option really is.

Multi-mode

Random characters, Diceware passphrases (EFF wordlist), memorable patterns, PINs. Each with its own length / class controls.

Bulk mode

Generate 1 — 1000 passwords at once for credential rotation. Export as CSV, JSON, or plain text.

Pwned check (offline)

Local SHA-1 prefix lookup against known breached passwords — never uploads the password, just the first 5 hash chars.

Never leaves the browser

Generation, entropy math, breach check — all client-side. No telemetry on outputs.

Three steps

From a quick gen to bulk-rotation-ready.

Pick mode

Random, Diceware, memorable, PIN. Each has its own knobs.

Generate

Single or batch. Entropy shown next to each output.

Copy

To clipboard, CSV, or paste straight into your secrets manager.

Simple pricing

Pick a plan and stop using `dog-2024!`.

One subscription unlocks every BestPaid tool except TradePulse, which is sold separately — see the full catalogue at bestpaid.app/saas.

Starter

For individual security-conscious users

$9/mo

2000 generations / mo
All 4 modes
Entropy display
Pwned-check (offline)

Frequently asked

Does my password leave my browser?

No. Generation, entropy math and breach check all run client-side. The breach check uses k-anonymity — only first 5 chars of the SHA-1 are sent to the breach API.

Which RNG do you use?

crypto.getRandomValues() — the same CSPRNG your browser uses for TLS keys. Never Math.random().

How do you calculate entropy?

log2(charset_size^length) for random passwords; log2(wordlist_size^words) for passphrases. Real entropy, not a marketing number.

Do I get a free trial?

No — this is a paid tool with plans from $9 a month. Starter is $9/mo and Pro is $19/mo; you can cancel any time.

How do I cancel?

Account page or email. Cancellation stops the next renewal.

How strong is it, exactly?

Entropy in bits, the size of the keyspace, and the time each attack speed needs — computed by the same module the generator uses.

Stop reusing passwords.

Generate strong ones, in bulk, in your browser.

See plans