Generate passwords and passphrases

Generation code has no network API, analytics, storage or service worker. Content Security Policy blocks connections. Page loads and clicked links still make ordinary connections. Replaced hosting code, extensions, a compromised browser or operating system can expose secrets. A verified offline artifact reduces ongoing trust in the host.

For independent characters, the number of outcomes is alphabet size raised to length. For passphrases, it is token count raised to word count. With required character groups, the generator counts valid strings exactly and samples uniformly. A fixed separator adds no bits. Editing, removing words or repeatedly selecting favorites changes the selection model.

Guessing cost depends on the service password storage, KDF cost, rate limits, attacker resources and password reuse. Save a unique result for each account in your password manager. Prefer passkeys or MFA when available. This generator does not prevent phishing.

Do not directly use these outputs as protocol keys, wallet seeds, nonces or key pairs. Use a specialized protocol tool and its key-generation API. These formats have separate distribution, lifetime, storage and authentication requirements.

No. Engineering tests and corpus proxies cannot replace observation of Vietnamese participants. Both accented and accent-free lists are experimental. A website may normalize or transform Unicode passwords, so verify that you can enter one again before relying on it.