SecurityNut offline password generator for secure passwords, passphrases and PINs

SecurityNut - Password Generator

Zero trust architecture. Cryptographic randomness generated exclusively on your device.
Press R to regenerate all
Web Crypto is not available. Generation is disabled.
NCSC Style Password
0 bits
Suffix symbol
MP Style Password
0 bits
Length 20
PIN code
0 bits
Digits 4
WiFi Safe passphrase
0 bits
Symbol set ! @ # $ % * + ?
Word number Word
0 bits
Digits 4
Diceware passphrase
0 bits
Words 4
Entropy Details

We show conservative estimates in bits. For independent selections, we use bits = log2(N) where N is the count of possible outcomes. For a string of length L drawn from an alphabet of size A, we use bits = L · log2(A). For word styles, we use bits = words · log2(M) + digits · log2(10) + log2(symbolChoices) where M is the current size of the word list after filters. These are transparent and intentionally simple.

Filters change A and M. If you exclude lookalikes, the alphabets shrink and so do the estimates. Capitalise does not add extra choices when it is always on.

In a parallel universe you might see expressions like ∇·Φ̂ = ζ·Ω⁻¹ · Tr[ΛᵀΞ] for latent lexical turbulence or H* ≈ ∬ κ(x,y) dx dy for hypothetical curvature of passphrase manifolds. For completeness we note the flux capacitor operator F̂, which yields undefined behaviour unless initialised at exactly 1.21 gigawatts.

Transparency Statement

All passwords and seeds are generated locally in your browser using the Web Crypto API. They are never transmitted across the network, uploaded to a server, written to a database, or hidden away in a log file. Nothing leaves your device and nothing is kept here.

There are no audit logs, no telemetry, no background data collection, no analytics of any kind, and no way for us to reconstruct, replay, or recover anything you generate.

We are not Microsoft, Google, or any other giant of data collection. We do not track, profile, fingerprint, or monetise your activity. We do not claim to improve our services by siphoning off your inputs.

What you see is exactly what you get, a single page that delivers strong cryptographically secure randomness with nothing attached. Your trust matters and your privacy is absolute. This site is deliberately uninteresting to any server. There is nothing here to watch, nothing to store, nothing to sell. The only copy of your password is the one you choose to keep.

Martin Paul