Question 1

Does my password leave my browser?

Accepted Answer

No. Generation, entropy math and breach check all run client-side. The breach check uses k-anonymity — only first 5 chars of the SHA-1 are sent to the breach API.

Question 2

Which RNG do you use?

Accepted Answer

crypto.getRandomValues() — the same CSPRNG your browser uses for TLS keys. Never Math.random().

Question 3

How do you calculate entropy?

Accepted Answer

log2(charset_size^length) for random passwords; log2(wordlist_size^words) for passphrases. Real entropy, not a marketing number.

Question 4

Do I get a free trial?

Accepted Answer

No — PasswordForge is paid from $5/mo. The demo on the landing page generates examples so you can see exactly what you'd get.

Question 5

How do I cancel?

Accepted Answer

Account page or email. Cancellation stops the next renewal.

Privacy Policy

What we collect

How we use it

Sharing

Your rights

Contact