Password & passphrase generator
Make a strong random password or a passphrase of random words. It uses your browser's cryptographic random numbers and uploads nothing.
Choose a length and the kinds of characters to use, or switch to a passphrase of random words that is easier to remember and type. Every character or word is picked by your browser's cryptographic random number generator, and nothing leaves this page.
How it works
- Choose a password or a passphrase, then set the length and the options.
- Check the entropy meter. Aim for Strong or better for any account that matters.
- Copy the result into your password manager or the sign-up form.
What happens to your data
- The password is made by your browser. It is not sent to Revault or anyone else, and generating one makes no request at all.
- Nothing is saved: no history, no stored settings, no log. Reload the page and the password is gone.
- Characters and words come from the browser's cryptographic random generator, and none is more likely than another.
Limits to know about
- The entropy figure is approximate. It assumes an attacker knows how the password was made, and it says nothing about a site that stores passwords badly.
- A strong password still needs a safe place to live. Keep it in a password manager and use a different one for every account.
Frequently asked questions
Is it safe to generate a password in a web page?
It can be, when the page sends nothing out and the random numbers are unpredictable. This page makes no requests when you generate, and it uses the browser's cryptographic random generator. For your most important accounts, make the password on a device you trust and close the tab afterwards.
How long should a password or passphrase be?
For a random password, 16 characters or more with several kinds of character is strong. For a passphrase, use at least five words, and six for anything that protects other passwords, such as a password manager. Each word adds about 12.9 bits.
Where does the word list come from?
Passphrases use the EFF large word list of 7,776 words, chosen to be easy to spell and hard to confuse. The Electronic Frontier Foundation publishes it under the Creative Commons Attribution 3.0 US licence.