Every character and word is chosen with crypto.getRandomValues using rejection sampling, so there's no bias. Strength is shown as entropy in bits — the number of yes/no guesses an attacker would need — with a crack-time estimate assuming a fast offline attacker (10 billion guesses per second). As a rough guide, aim for 70+ bits for important accounts. Nothing here is stored or transmitted; when in doubt, save new passwords straight into a password manager.
Questions & answers
Are the passwords generated securely?
Yes — they use your device's cryptographic random generator, and everything happens locally so a password is never sent anywhere.
Can I make a memorable passphrase?
Yes — as well as random-character passwords you can generate word-based passphrases that are easier to remember.
Is anything stored?
No. Generated passwords are never saved or uploaded — once you leave the page they're gone.