Passphrases
Every passphrase, password, dice roll and example on this site is generated by JavaScript in your browser using crypto.getRandomValues. The wordlists are part of the page. No passphrase, and nothing you type into the entropy checker or dice lookup, is sent to any server.
Stored on your device
The site uses your browser's localStorage, never cookies, for two things:
- your generator settings (word count, list, separator), so they're remembered next visit;
- if you switch it on, a history of your last 10 passphrases. It's off by default. Don't turn it on on a shared computer.
The AI rules helper
If you use "Fit my passphrase", the rules text you pasted is sent to our server and on to an AI model through Vercel AI Gateway to suggest settings. Please paste only a site's password rules. We don't store the text; our hosting provider may keep short-lived technical logs, and your IP address is held briefly in memory to limit abuse.
Analytics
We use Ahrefs Web Analytics to count page views. It's cookieless and doesn't see anything you generate.