Question 1

Is this password generator secure?

Accepted Answer

Yes. In browser mode, the password is created with the Web Crypto API (crypto.getRandomValues) and never leaves your device. In server mode, it is generated with a CSPRNG (PHP random_int); the password is never logged or stored — it is destroyed once the response has been sent.

Question 2

How long should my password be?

Accepted Answer

We recommend at least 12–16 characters using all four character sets (lowercase, uppercase, digits, symbols). For passwords stored in a password manager, feel free to go with 20+ characters.

Question 3

What is the difference between browser and server generation?

Accepted Answer

In browser mode, the password is created on your device and no data ever goes out to the network. In server mode, our server's cryptographic random number generator creates it — useful when you do not trust the local environment (for example an old or kiosk machine).

Strong passwords,one click away.

Strong passwords,
one click away.