Secure Passphrase & Key Generator
Secure Passphrase & Key Generator creates high-entropy secrets entirely in your browser: passwords with configurable character sets, memorable passphrases from the EFF large wordlist, API tokens in hex, base64url or base58, UUID v4 and v7 identifiers, and WPA2/WPA3-ready keys with a WIFI: QR payload string. Random values come only from crypto.getRandomValues with rejection sampling so picks stay uniform. An entropy meter reports bits, a weak/OK/strong label, and an estimated crack time at ten billion guesses per second. Bulk mode can produce up to one hundred secrets at once for copy or share. Generated values are never stored; only your last options are kept in localStorage. Use it when you need a private key for Wi-Fi, an API token for a new integration, or a passphrase you can type without looking it up.
How to use
- Choose a mode: password, passphrase, API token, UUID, or WPA key.
- Adjust length, character sets, encoding, or word count. Watch the entropy meter update.
- Tap Generate (set bulk count up to 100 if needed), then Copy or Share from the sticky bar.
FAQ
Are generated passwords sent to a server?
No. Randomness and generation run entirely in your browser with the Web Crypto API. Nothing you generate is uploaded, logged, or stored on our servers — not even in localStorage (only your options are saved).
What wordlist do passphrases use?
Passphrases use the EFF large wordlist (7,776 words), licensed under Creative Commons Attribution 3.0 US. The list loads as a separate chunk only when you generate a passphrase.
How is entropy calculated?
We estimate bits from alphabet size and length (or wordlist size × word count). Labels are weak under 50 bits, OK under 80, and strong at 80 or more. Crack time assumes 10¹⁰ guesses per second.
Can I generate a Wi-Fi QR payload?
Yes. In WPA mode we show the WIFI: QR string for your SSID and key. You can open the QR tool with that payload prefilled when it is available.
Is the randomness biased?
No. We use crypto.getRandomValues with rejection sampling so character picks stay uniform — never a non-crypto PRNG.