Security

Generate Strong Passwords On-Device (Not in the Cloud)

You don’t need a cloud site to roll a strong password. Generate it in the browser, then stash it in a real password manager.

Cloud password generators are weird when you think about it. You’re asking a stranger’s server to invent the secret that unlocks your bank or CMS - then hoping they don’t log it.

Your browser already has Web Crypto. A generator can stay entirely on-device. Candidate passwords never need to show up in someone else’s access log.

Length beats cleverness

Humans invent patterns. Attackers know those patterns. A long random string (or a solid passphrase) beats “P@ssw0rd!” every time.

Use Password Generator to set length and character classes, then put the result straight into a password manager. Not a Notes screenshot. Not a sticky on the monitor.

Quick checklist

  • One password per account. Boring, effective.
  • Don’t reuse work passwords on personal stuff (or the other way around).
  • Let the manager autofill. Forced 90-day rotates without a manager just train people to write weaker secrets.

Need an ID, not a secret? UUID Generator. Checking a file digest after an export? Hash Generator - also client-side.

← All posts Browse tools