Strong passwords. Real entropy. Never on a server.
Generate random passwords, Diceware passphrases, or PINs — with entropy shown in bits. Bulk mode for credential rotations. Everything runs in your browser.
Plans from $5/mo — cancel any time
For people who take passwords seriously
Built for sysadmins, security engineers, and anyone rotating creds on schedule.
Cryptographically secure
Uses crypto.getRandomValues() — never Math.random(). Same RNG your browser uses for TLS.
Entropy in bits
Every output shows actual entropy (bits). See exactly how strong each option really is.
Multi-mode
Random characters, Diceware passphrases (EFF wordlist), memorable patterns, PINs. Each with its own length / class controls.
Bulk mode
Generate 1 — 1000 passwords at once for credential rotation. Export as CSV, JSON, or plain text.
Pwned check (offline)
Local SHA-1 prefix lookup against known breached passwords — never uploads the password, just the first 5 hash chars.
Never leaves the browser
Generation, entropy math, breach check — all client-side. No telemetry on outputs.
Three steps
From a quick gen to bulk-rotation-ready.
Pick mode
Random, Diceware, memorable, PIN. Each has its own knobs.
Generate
Single or batch. Entropy shown next to each output.
Copy
To clipboard, CSV, or paste straight into your secrets manager.
Simple pricing
Pick a plan and stop using `dog-2024!`.
For individual security-conscious users
- 2000 generations / mo
- All 4 modes
- Entropy display
- Pwned-check (offline)
For IT teams + ops
- 100k generations / mo
- Bulk mode (up to 1000/batch)
- CSV / JSON export
- Custom Diceware wordlists
- Priority support
Frequently asked
Does my password leave my browser?
No. Generation, entropy math and breach check all run client-side. The breach check uses k-anonymity — only first 5 chars of the SHA-1 are sent to the breach API.
Which RNG do you use?
crypto.getRandomValues() — the same CSPRNG your browser uses for TLS keys. Never Math.random().
How do you calculate entropy?
log2(charset_size^length) for random passwords; log2(wordlist_size^words) for passphrases. Real entropy, not a marketing number.
Do I get a free trial?
No — this is a paid tool with plans from $5 a month. Starter is $5/mo and Pro is $15/mo; you can cancel any time.
How do I cancel?
Account page or email. Cancellation stops the next renewal.
How strong is it, exactly?
Entropy in bits, the size of the keyspace, and the time each attack speed needs — computed by the same module the generator uses.
- How strong is a 6-character password?
- How strong is an 8-character password?
- How strong is a 10-character password?
- How strong is a 12-character password?
- How strong is a 14-character password?
- How strong is a 16-character password?
- How strong is an 18-character password?
- How strong is a 20-character password?
- How strong is a 24-character password?
- How strong is a 32-character password?
- How strong is a 4-digit PIN?
- How strong is a 6-digit PIN?
- How strong is an 8-digit PIN?
- How strong is a 3-word passphrase?
- How strong is a 4-word passphrase?
- How strong is a 5-word passphrase?
- How strong is a 6-word passphrase?
- How strong is a 7-word passphrase?
- How strong is an 8-word passphrase?
- How long should a password be?
- What is password entropy, in bits?
- How long would it take to crack my password?
- Passphrase or random string — which is stronger?
- What is a sensible minimum password length?