Live at passwordgenerator.help — a free, static, browser-only tool for generating strong passwords, PINs and passphrases.
Password generators ask you to trust that your generated secret never leaves your browser. This repo is the entire implementation, so that claim doesn't have to be taken on faith — you can read exactly what the code does.
- Pure HTML/CSS/vanilla JavaScript, no build step, no framework, no backend.
- Randomness comes from
window.crypto.getRandomValues()(Web Crypto API), neverMath.random(). - Character selection uses rejection sampling to avoid modulo bias.
- Passphrases are drawn from the EFF long wordlist (7,776-word public diceware list).
- Nothing is transmitted, logged, or stored — there is no network request involved in generating a password, PIN, or passphrase. See
security.htmlandmethodology.htmlfor full detail, including how entropy is calculated.
index.htmland the other top-level*.htmlfiles — one page per tool/search intent (strong password, 16-character, PIN variants, passphrase, strength checker, etc.).assets/generator.js— all generation and strength-checking logic, shared across pages.assets/style.css— shared styling.sitemap.xml,robots.txt— SEO/crawler configuration.
No build step required. Serve the directory with any static file server, e.g.:
npx serve .This is a small, independently maintained project. Bug reports and pull requests (accuracy fixes, accessibility improvements, security findings) are welcome via GitHub issues/PRs.