Password Generator Frequently Asked Questions
Clear answers about how the generator works, what options do, and how we handle privacy and history.
No. All password generation runs entirely in your browser (client-side). The site does not send the generated passwords, settings, or any input you provide to our servers.
When available, the generator uses the browser's Web Crypto API (window.crypto.getRandomValues) to produce cryptographically strong random values. If the Web Crypto API is not available, the code falls back to a less secure method such as Math.random().
You can choose Random (mixed characters), Passphrase (word-based), PIN (numbers only), and Memorable (human-friendly mnemonic styles). Each type adjusts available options and the generation algorithm.
Common options include length (8–128), inclusion of uppercase, lowercase, numbers, and symbols. Advanced options let you exclude similar or ambiguous characters, avoid sequential characters, prevent repeated characters, choose pattern templates, or provide a custom character set (which overrides other character options).
The pronounceable option attempts to generate strings using consonant-vowel patterns so they are easier to say and remember. The avoid dictionary option tries to reduce the chance of real dictionary words appearing by filtering word lists or adjusting selections; both operate locally in the browser using bundled lists and heuristics.
If you save or use the history feature, passwords are stored only in your browser's localStorage under the key 'passwordHistory'. The history is limited to the most recent 50 entries. Nothing is uploaded to a server unless you explicitly export and send it yourself.
The strength meter estimates entropy based on length, character sets used, and patterns. It gives a visual rating (Weak / Medium / Strong / Very Strong) to help you choose stronger passwords. It is an estimate and not a guarantee of security.
If you enter text into the Custom Character Set box, the generator will use only those characters when creating passwords. This overrides the include/exclude toggles and is useful for meeting specific password policies.
Yes, the UI provides a Bulk Generate feature and options to export or save generated passwords to history. Exporting will create a downloadable file in your browser; the app does not automatically transmit exported data anywhere.
Prefer longer passwords (12+ characters) using mixed character sets for high-value accounts. Use passphrases (several unrelated words) for memorability. Always store passwords in a trusted password manager instead of reusing or writing them down insecurely.