About PasswordIdeas
Free, private security tools that run entirely in your browser.
PasswordIdeas is an independent project that builds free security tools for everyday people: password, passphrase, PIN and username generators, a strength tester, an entropy calculator, a data breach checker, hash and WiFi QR code generators, an EXIF metadata remover and text encryption. Every tool is available in 11 languages and works without an account.
Our mission
Most account takeovers start with a weak or reused password. We want creating a strong, unique password to take seconds, and we want you to be able to do it without trusting anyone's server with your secrets. That is why every tool on PasswordIdeas runs locally in your browser, and nothing you type or generate is ever sent to us.
How our tools work
Each tool is built on standard browser cryptography rather than hidden server-side code:
Randomness comes from the Web Crypto API (crypto.getRandomValues), the cryptographically secure generator built into every modern browser. We never use Math.random for anything security related.
We use rejection sampling, so every character, digit and word has exactly the same chance of being picked, with no modulo bias.
The breach checker uses the k-anonymity model of Have I Been Pwned: only the first 5 characters of a SHA-1 hash leave your device, never the password itself.
Text encryption uses AES-256-GCM with a key derived by PBKDF2-SHA256 over 100,000 iterations, all inside your browser.
Passphrases are drawn from published wordlists (the EFF Large Diceware list of 7,776 words and the BIP39 list of 2,048 words), so the entropy of every result can be calculated and checked.
Sources and standards we follow
Our advice on password length, passphrases, reuse and password changes follows NIST Special Publication 800-63B (Digital Identity Guidelines), the OWASP Authentication Cheat Sheet and the Electronic Frontier Foundation's work on Diceware passphrases. Strength and crack-time figures are estimates based on entropy and published attacker guessing speeds, and each tool page explains the assumptions behind its numbers.
How we keep the site up to date
We regularly review the tools and the explanations around them, fix reported problems, and update our guidance when security standards change. Every page is published in English, Arabic, German, Spanish, French, Indonesian, Japanese, Portuguese, Russian, Turkish and Chinese.
How PasswordIdeas is funded
The tools are free and will stay free. To pay for hosting and development, some pages may show advertising served by Google AdSense, and a few pages recommend security products through clearly labelled affiliate links, which can earn us a commission at no extra cost to you. Advertisers and partners never receive anything you type or generate in our tools, and they have no influence over our advice or tool results.
Read how we handle data in our Privacy PolicyGet in touch
Found a bug, spotted a mistake, or have an idea for a new tool? We read every message sent through our contact form.
Contact us