Generate a strong password or passphrase

Yes, with the caveat that matters: this tool generates passwords entirely in your browser using the Web Crypto API (crypto.getRandomValues), the same cryptographically secure random source your operating system uses. Nothing is sent to a server — there is no network request on the generate path, no logging, no history. The safest place to generate a high-value password is still on a device you trust; for that, the on-device iPhone app is the better home.

No. Math.random is predictable and must never be used for passwords. This tool uses crypto.getRandomValues with unbiased rejection sampling, so every character or word is drawn with equal probability from a cryptographically secure source. That is the same standard the Swarmval Password Generator app uses on iPhone via SecRandomCopyBytes.

Entropy measures how hard a password is to guess, in bits — each extra bit doubles the work an attacker must do. Rough targets for 2026: 60+ bits is brute-force-safe for ordinary accounts for the next decade; 77+ bits is appropriate for banking, email, and a password-manager master password. This tool shows the exact bits for whatever you generate so you are not guessing.

Use whichever you can actually remember without writing it down. For accounts you type by hand (laptop login, password-manager master, work SSO), a multi-word passphrase wins — it reaches high entropy while staying memorable. For accounts you only ever access through a password manager, a long random string is fine because you will never type it. The worst password is the one you stick on a Post-it because you could not remember it.

Generating a strong password is a one-line operating-system call with no server cost, yet this category was called out by The Washington Post, 9to5Mac, and Sophos as one of the App Store’s most extreme “fleeceware” categories — apps billing $19.99 per week for it. The weekly billing is the trap. Swarmval Password Generator ships at fair pricing: a free tier, $4.99/month (3-day trial), $14.99/year, or $19.99 once for lifetime — never weekly.

In a password manager — iCloud Keychain, 1Password, or Bitwarden — not on paper or in Notes. A generator’s job ends when the password exists; a manager’s job is to remember it and fill it. This tool is stateless on purpose: it shows the password, you copy it into your manager, and it forgets it.