~/tools $ ./passgen
Password Generator & Strength
Generate unbiased random passwords and estimate how long any password survives real cracking rigs.
Runs entirely in your browser. Nothing you paste is sent anywhere.
Strength
How the estimate works
Entropy is length times log2 of the character pool, then reduced for patterns that cracking rules target first: dictionary words, sequences, repeats, and trailing years. Times assume the attacker searches half the space on average. Real crackers are smarter than brute force, so treat anything a human chose as weaker than shown.
Randomness
Passwords come from crypto.getRandomValues with rejection sampling, so every character is equally likely. Math.random() is not a cryptographic generator and should never be used for secrets.