Offline Password Generator
Generate strong passwords with your browser's cryptographic random source. After the page loads it works fully offline — a password that never touches a network.
How it works
- Open this page once — from then on it works even with the network off.
- Pick a mode: random characters, a passphrase with separators, or a numeric PIN.
- Adjust length and character sets; watch the entropy meter react.
- Generate, copy, and paste straight into your password manager.
When this helps
- Minting a unique password for a new account signup.
- Rotating credentials after a breach notice, without trusting a website.
- Generating Wi-Fi or device PINs on an air-gapped machine.
- Creating memorable passphrases with hyphens, spaces or underscores.
Limits and notes
- Nothing is stored — regenerate and copy again if you close the tab.
- The generator cannot check whether a password has appeared in a breach.
- Strength is measured as entropy; reuse across sites still defeats it.
Why passwords should not come from a server
A password generated on someone else's server has, by definition, existed on someone else's server. This page uses the Web Crypto API in your browser — the same randomness source your operating system trusts — and computes everything locally. Turn on airplane mode and it still works: the password is born on your device and never leaves it until you paste it.
FAQ
How is this safer than an online generator?
The password is created by crypto.getRandomValues() inside your browser tab — no server ever sees it. Most "online generators" can't prove that; here it's architectural.
What does the strength meter measure?
Entropy in bits: length × log2(character pool). 16 chars over a 92-char pool is ~104 bits — beyond any brute-force budget.
Should I include symbols?
Yes if the site allows them — but length matters more than complexity. A 20-char letters-and-digits password beats a 10-char symbol salad.
Are passphrases really secure?
Yes. Each word is drawn from a 2048-word list (11 bits of entropy per word), so a 5-word passphrase is ~55 bits and 6 words ~66 bits — comparable to a random 10–11 character password, but far easier to type and remember. This is the xkcd “correct horse battery staple” idea, done with crypto-secure randomness.
Why exclude ambiguous characters?
0/O and 1/l/I look identical in many fonts. Excluding them costs a little entropy but saves real login failures when you have to read the password aloud or type it from a printed sheet.