Random Password Generator — built from Web Crypto randomness

Every value on this page comes from the browser's built-in cryptographic random API (Web Crypto, crypto.getRandomValues) rather than the usual Math.random(), and modulo bias is removed with rejection sampling — good enough for values that must be unpredictable, like passwords and UUIDs.

No. Everything is computed inside this browser and no value is ever sent to a server. For convenience, only the last tab you opened is remembered in this browser; generated passwords, codes and profiles are not stored.

No. Names, phone numbers, emails and addresses are fake data built from random combinations of common surnames, syllables and place-name fragments, unrelated to any real person. Use them only for testing screens and forms — never for identity checks or real sign-ups.

It is the number of guesses a brute-force attacker would need, on a log scale. Each extra bit doubles the possibilities. Generally, 60 bits or more is considered safe even against offline brute-force attacks. It rises as you add length or character types.

At the same entropy, something like ABc7#kQ2 is harder to remember and type by hand than river-fox-42-stamp. More words means more security — use five or more for important accounts.