Where does the randomness come from?

The Web Crypto API in your browser (crypto.getRandomValues). There is no hosted entropy service.

Are generated passwords stored?

Not on this server. Optional history uses on-device storage you control, not an account.

How do I check strength after generating?

Open Password Strength in this sandbox. That check is also local.

Why this tool stays in the browser

Passwords are generated with crypto.getRandomValues in the page itself. Length, character classes, and a strength meter stay local — there is no account, no clipboard sync to a backend, and no password history on a server. That is the differentiator versus hosted generators that log entropy samples. Check a candidate on the strength tool, or hash it with bcrypt if you are seeding a local user table.

FAQ

Where does the randomness come from?: The Web Crypto API in your browser (crypto.getRandomValues). There is no hosted entropy service.
Are generated passwords stored?: Not on this server. Optional history uses on-device storage you control, not an account.
How do I check strength after generating?: Open Password Strength in this sandbox. That check is also local.

Password Generator

Generate highly secure passwords with customizable options and strength checker.

StrengthVery Strong

Password Length16

Uppercase (A-Z)Lowercase (a-z)Numbers (0-9)Symbols (!@#$)