ToolbitSecure Password Generator
Create a password using the browser's cryptographic random number generator. Nothing is sent over the network, and nothing is stored — close the tab and it is gone.
What the Password Generator does
- Cryptographically secure randomness via crypto.getRandomValues.
- Configurable length and character sets, with ambiguous characters excluded.
- Entropy-based strength meter, not a naive rule checker.
- Passphrase mode for something you can actually type.
How to use it
- Set the length and choose which character classes to include.
- Generate, and check the entropy estimate.
- Copy it straight into your password manager.
Why it runs locally
Toolbit has no backend. The Password Generator is implemented with standard browser APIs, so your input is processed in the tab and never uploaded, logged, or retained. That is what makes it safe to paste real data into — and it is also why the tool keeps working with the network disconnected, once you have installed Toolbit as an app.
Frequently asked questions
- Is a browser-generated password safe?
- Yes when it uses crypto.getRandomValues, which Toolbit does. That is the same CSPRNG your browser uses for TLS, not Math.random.
- Is the password ever transmitted or stored?
- No. It is generated in your tab, never sent anywhere, and never written to storage.
- How long should a password be?
- For a random password with mixed character classes, 16 characters or more is a sensible floor; for a passphrase, four or more random words.