Password Generator

Generates random passwords or diceware-style passphrases entirely in your browser, using the same EFF large wordlist (7,776 words) that security researchers recommend. Every result comes with its exact entropy in bits and a humanized crack-time estimate at 10 billion guesses per second.

Choose Password or Passphrase mode. For passwords, set the length and toggle which character sets to include; for passphrases, set the word count, separator, and whether to capitalize each word. Leave the seed blank for cryptographically secure randomness, or set it to get the same reproducible output every time (useful for testing).

Most password generator sites are covered in ads, cap how many characters you can generate, or quietly log what you type into a form field. This one runs the whole computation locally with crypto.getRandomValues, shows the actual entropy math instead of a vague "strength" bar, and your generated credentials never touch a network request.

Is this actually random, or can the output be predicted?

With the seed field empty, every character or word comes from crypto.getRandomValues, the same cryptographically secure source browsers use for key generation. Only setting a seed switches to a deterministic (predictable) generator, and that is opt-in for testing.

What is a diceware passphrase and why use one?

Diceware picks whole words at random from a large, fixed wordlist (here, the EFF large list of 7,776 words) instead of random characters. Six random words give about 77.5 bits of entropy (comparable to a long random password) while being far easier to memorize and type.

What does the crack-time estimate mean?

It divides the total possible combinations (2 raised to the entropy in bits) by 10 billion guesses per second, a realistic ceiling for offline GPU cracking of a well-hashed password. It is an order-of-magnitude estimate, not a guarantee: always pair strong passwords with unique use per site and, ideally, a password manager.