Frequently asked questions

Is my data uploaded to a server?
No. Every operation runs inside your browser using JavaScript. Nothing you paste or type is sent to our servers, stored or logged. You can disconnect from the network after the page loads and the tool keeps working.
Is it safe to get a password from a website?
It depends entirely on where the password is generated. This one is built in your browser from crypto.getRandomValues and is never sent anywhere - you can disconnect from the network first and it still works. A generator that produces passwords on a server has, by definition, seen your password.
What does the entropy figure mean?
How many bits of genuine randomness the password carries: the base-2 logarithm of the number of equally likely passwords the generator could have produced. Every extra bit doubles the guessing effort. Below about 45 bits is weak; above 100 is very strong.
Is a longer password better than a more complicated one?
Almost always. Length adds entropy faster than adding character types does, and a long password made of ordinary characters is easier to type and remember than a short one full of symbols.

Stuck on an error?

Every common JSON parse error is explained separately, with the cause and the fix: common JSON errors.

How your data is handled

Everything happens on your device. There is no upload, no storage and no logging, and only your interface preferences - theme, indentation, font size and word wrap - are kept between visits. Closing the tab clears the document.