Passphrase Generator
Something you can read down a telephone to a client, or something dense for a vault — with the strength stated in bits rather than in traffic lights.
Where the randomness comes from. Your browser's
crypto.getRandomValues, which is the operating system's own generator — not
Math.random, which is fast, predictable, and has no business anywhere near a
credential. Draws are rejection-sampled, so every word and every character is equally likely
rather than slightly favouring the start of the list.
Nothing leaves this page. There is no request when you press the button: the wordlist is already here and the generating happens in front of you. Close the tab and what was on it is gone.
What the bits mean. The number is how many guesses an attacker would need, on average, expressed as a power of two — assuming they know exactly how this tool works, which they do, because it is described above. 40 bits is a speed bump. 60 is beyond casual cracking. 80 and above is beyond anybody who has to guess it offline.