PassForge — Password & Passphrase Generator

Generate strong passwords and passphrases offline, copy them in one click or drop them straight into any password field.

PassForge generates strong passwords and passphrases entirely on your device — no server, no account, no network request of any kind. STRONG BY DEFAULT Passwords from 6 to 128 characters, mixing uppercase, lowercase, digits and symbols. Every character comes from your browser's own cryptographic random generator (crypto.getRandomValues), the same source used for encryption keys — never Math.random. PASSPHRASES YOU CAN ACTUALLY REMEMBER Switch to passphrase mode for 3 to 12 words drawn from the EFF's 1,296-word wordlist, with the separator, capitalisation and optional trailing number you choose. Easy to read out loud or type on a phone keyboard, hard to guess. SEE THE STRENGTH, NOT JUST THE LENGTH Every password shows its real entropy in bits and an estimate of how long an offline attack would take against it — updated live as you change the settings. ONE CLICK, DONE The main action copies the password, remembers which site it was for, and closes the popup — no extra windows, no extra clicks. Prefer the keyboard? Ctrl+Enter does the same. KNOW WHERE EACH PASSWORD WENT The last 10 passwords you copy or insert are listed with the site they were made for, so you're never guessing which one you just used. This history lives in memory for the browser session only — it's gone the moment you close Chrome, and it's never written to disk or synced anywhere. INSERT WITHOUT LEAVING THE PAGE Right-click any password field and choose "Insert a generated password", or press Alt+Shift+F, to drop a new password straight in — works with React and other frameworks that watch for real input events. ADVANCED CONTROLS WHEN YOU NEED THEM Extended symbol set, exclusion of look-alike characters (Il1O0oB8S5Z2G6q9g), and a free-form list of characters to avoid for sites with unusual rules. PRIVATE BY CONSTRUCTION PassForge has no host permissions, no remote code, and no analytics. It cannot see what you type or browse. Read the full privacy policy at the link below. Built with no third-party dependencies. Available in English and Spanish.