A password nobody has
seen but you.
Every password here is drawn by your browser’s cryptographic random generator, in this tab, and never sent anywhere. That matters more than it sounds: a generator that runs on a server is a server that has seen your password, and there is no way to check what it did with it.
A conventional online converter takes your file, puts it on someone else's disk, does the work there and lets you download the result. Two copies of your file then exist somewhere you cannot see, for as long as that company decides. Here the code that does the work is shipped to your browser instead of your file being shipped to a server: the bytes are read by this tab, transformed in memory, and written back out as a download. Our server never sees them, so there is nothing for us to keep, log or lose.
One thing is counted, and here it is: when a tool finishes, this page tells the server which tool ran and whether it worked — never the file, its name, its size or anything read out of it, none of which ever leaves this tab. It is how we know which tools are worth keeping. The record is the same kind we keep for a one-time link: a truncated IP address, a country and a region.
Once the page has loaded, these tools keep working with the network switched off. That is the simplest proof that nothing is being sent anywhere.
Frequently Asked Questions
Q: Where does the randomness come from?
From your browser’s cryptographic random number generator (crypto.getRandomValues), which draws on the operating system’s entropy pool. It is the same source a browser uses to generate the keys of an HTTPS connection, and it is not the Math.random() that most toy generators use.
Q: Does the password touch your server?
Never. It is made in this tab and stays here — turn off the network and the generator keeps working, which is the easiest way to see for yourself. A password that was generated somewhere else is a password somebody else has held.
Q: Are word passphrases weaker?
Not if they are long enough. Five random words from a 512-word list is about 45 bits, which is comparable to an eight-character random password and vastly easier to type on a phone or read down a phone line. The entropy figure under the box tells you exactly where you stand.
Q: What is the actual rule for passwords?
Never use the same one twice, and let something else remember them. Length beats cleverness: a long passphrase you can type is better than a short scramble you keep somewhere unsafe because it is unmemorable.
Q: How do I get it to somebody else?
Not by chat or email, where it stays in the history for ever. Put it in a one-time secret link from this site: it can be opened once and then deletes itself.
The same idea, applied to sending things rather than changing them.