Strong passwords. Real entropy. Never on a server.
Generate random passwords, Diceware passphrases, or PINs — with entropy shown in bits. Bulk mode for credential rotations. Everything runs in your browser.
Plans from $5/mo — cancel any time
For people who take passwords seriously
Built for sysadmins, security engineers, and anyone rotating creds on schedule.
Cryptographically secure
Uses crypto.getRandomValues() — never Math.random(). Same RNG your browser uses for TLS.
Entropy in bits
Every output shows actual entropy (bits). See exactly how strong each option really is.
Multi-mode
Random characters, Diceware passphrases (EFF wordlist), memorable patterns, PINs. Each with its own length / class controls.
Bulk mode
Generate 1 — 1000 passwords at once for credential rotation. Export as CSV, JSON, or plain text.
Pwned check (offline)
Local SHA-1 prefix lookup against known breached passwords — never uploads the password, just the first 5 hash chars.
Never leaves the browser
Generation, entropy math, breach check — all client-side. No telemetry on outputs.
Three steps
From a quick gen to bulk-rotation-ready.
Pick mode
Random, Diceware, memorable, PIN. Each has its own knobs.
Generate
Single or batch. Entropy shown next to each output.
Copy
To clipboard, CSV, or paste straight into your secrets manager.
Simple pricing
Pick a plan and stop using `dog-2024!`.
For individual security-conscious users
- 2000 generations / mo
- All 4 modes
- Entropy display
- Pwned-check (offline)
For IT teams + ops
- 100k generations / mo
- Bulk mode (up to 1000/batch)
- CSV / JSON export
- Custom Diceware wordlists
- Priority support
Frequently asked
Does my password leave my browser?
No. Generation, entropy math and breach check all run client-side. The breach check uses k-anonymity — only first 5 chars of the SHA-1 are sent to the breach API.
Which RNG do you use?
crypto.getRandomValues() — the same CSPRNG your browser uses for TLS keys. Never Math.random().
How do you calculate entropy?
log2(charset_size^length) for random passwords; log2(wordlist_size^words) for passphrases. Real entropy, not a marketing number.
Do I get a free trial?
No — PasswordForge is paid from $5/mo. The demo on the landing page generates examples so you can see exactly what you'd get.
How do I cancel?
Account page or email. Cancellation stops the next renewal.