About these tools

PassForge generates cryptographically secure passwords and passphrases directly in your browser using the Web Crypto API's crypto.getRandomValues() — the same source of randomness that powers TLS. You can dial in length, character sets, and complexity, or switch to a memorable multi-word passphrase. A real-time strength meter shows entropy in bits so you know exactly how strong your output is.

Because every password is generated locally on your device, there is no server that could log or leak it. The generated string exists only in your browser until you copy it and close the tab.

Common questions

• Are generated passwords sent to any server?
  No. PassForge uses crypto.getRandomValues() — a local browser API — to generate entropy. The result is computed on your device and never transmitted anywhere.
• Should I use a passphrase or a random password?
  It depends on your use case. Random character passwords pack more entropy per character, while passphrases are easier to type and remember. Read our guide to strong passwords for a practical breakdown.