Password generator
Strong random passwords and easy-to-remember passphrases, with a live strength meter and time-to-crack estimate — created with your device’s secure random generator. Nothing is ever sent or stored.
…Time to crack at 10 billion guesses/second: longer than the age of the universe
Generated with your device's secure random generator — nothing is sent or stored.
0 bytes of your file have left this device. Counted live in this tab, not claimed — open your browser’s Network tab and watch.
How it works
- 1
Pick a length and the character types you want — a password appears instantly.
- 2
Check the live strength meter; regenerate until you like what you see.
- 3
Copy it with one click — it was created on your device and is never sent or stored.
Frequently asked questions
Is it safe to generate a password on a website?
Here, yes — the password is created on your own device with the browser’s cryptographically secure random generator (crypto.getRandomValues) and never sent anywhere. You can even switch off Wi-Fi after the page loads and it keeps working, which would be impossible if passwords went to a server.
Does DiemDesk see or store my passwords?
No. Generation, display, and copying all happen locally in your browser. Nothing is transmitted, logged, or stored — check your browser’s Network tab while generating to confirm.
How long should my password be?
Use 16 characters or more for anything that matters — length strengthens a password faster than extra symbols do. 12 is a reasonable minimum; go longer for email, banking, and your password manager’s master password.
What do the “bits” in the strength meter mean?
Bits of entropy — a measure of how many guesses an attacker would need. Each extra bit doubles the guesswork. 60+ bits is good, 80+ is strong, and 128 bits is beyond any realistic cracking attempt.
Why exclude similar characters?
Characters like i, l, 1, O, and 0 are easy to confuse when a password is read, printed, or typed by hand. Excluding them costs a little entropy but avoids lockouts from misread characters.
Should I reuse a generated password on multiple sites?
No — use a unique password for every account, so one leaked site can’t unlock the others. A password manager makes that effortless: generate here, store it there.
What is a passphrase, and when should I use one?
A passphrase strings random words together (correct-horse-battery style). Each word adds about 13 bits of strength, and 5+ words rivals a long random password — while being far easier to remember and type. Ideal for master passwords and anything you type by hand.
Where do the passphrase words come from?
The EFF Large Wordlist — 7,776 carefully chosen, easy-to-type words published by the Electronic Frontier Foundation (CC-BY 3.0), the same list used by leading password managers. It ships inside the app, so words are picked on your device.
How is the time-to-crack estimated?
From the entropy bits, assuming a fast offline attack at 10 billion guesses per second — a deliberately pessimistic scenario. Real website logins are rate-limited and millions of times slower, so the shown time is a conservative lower bound.