Frequently Asked Questions
Everything you need to know about privacy, security, and how these tools work.
Is my password sent anywhere?
No. Every tool on this site runs entirely in your browser. Nothing you type or generate is ever transmitted over the network — not to a server, not to an API, and not to analytics. You can disconnect from the internet and everything still works. The strength checker makes zero network calls by design.
How is password strength calculated?
Strength is estimated from password length, character variety (uppercase, lowercase, numbers, symbols), and common-pattern detection. The checker flags sequential characters like "1234" or "abcd", repeated characters, and matches against a bundled list of the most common weak passwords. It also shows an estimated crack time based on a 10 billion guesses-per-second attack — this is an illustrative approximation, not a precise measurement.
How does the password generator create passwords?
Passwords are created using window.crypto.getRandomValues(), a cryptographically secure random source built into every modern browser. This is the same source browsers use for secure sessions and encryption. Math.random() is never used for password generation.
Are my passwords stored or saved anywhere?
No. Generated and checked passwords exist only in your browser's memory for the current page session and are discarded the moment you refresh or leave the page. Nothing is written to cookies, localStorage, sessionStorage, or any database.
Does the strength checker check against a breach database?
No. The checker compares your password against a small list of well-known common and weak passwords that is bundled directly into the page. It does not call any external breach-checking API such as Have I Been Pwned, because doing so would require sending your password over the network — which this site never does.
What is a passphrase and why use one?
A passphrase is a sequence of random words, such as "correct-horse-battery-staple", joined by a separator. Because each word is picked randomly from a large list, passphrases are extremely difficult to guess while remaining easy for humans to remember and type. The passphrase generator picks words with the same cryptographically secure random source used for passwords.
Is this site free to use?
Yes. All tools are completely free with no accounts, no sign-ups, and no limits. The site is supported by advertising, which is the only reason it can remain free.