PassGen is a small, single-purpose tool site: it generates passwords and passphrases, checks the shape of existing passwords, and explains the arithmetic behind both. It is part of a family of free browser tools built by Jimmy | ORBITFRAME, and it runs entirely as static pages — there is no account, no server component, and nothing to sign up for.
How generation works here
- Randomness comes from
crypto.getRandomValues, the Web Crypto API's interface to your operating system's cryptographic random source. - Random values are mapped to characters and words with rejection sampling: draws that fall in the uneven remainder of the range are discarded and redrawn, so every outcome is equally likely — no modulo bias.
- The passphrase word list is a self-built list of 1,316 common English words stored in the page's own code. Its size is printed wherever passphrase entropy is quoted, because the entropy depends on it.
- Strength is always expressed as entropy in bits: length × log2(pool size) for passwords, words × log2(list size) for passphrases, with crack-time models that state their assumed guessing rate.
What this site does not claim
- Entropy estimates describe resistance to guessing under stated assumptions. They are not guarantees, certifications, or audits of your overall security.
- The strength checker estimates a password's shape; it cannot know whether that password has appeared in a breach or is used on other accounts.
- No generator can rescue a password that is reused, phished, or stored carelessly. The site's advice — unique passwords, a password manager, two-factor authentication — is the other half of the system.
Questions or corrections are welcome through the portfolio site linked in the footer network. If you find a number on this site that does not match its stated formula, that is a bug — every figure here is computed from the formula by the site's own code, precisely so it can be checked.