Are passwords generated on this page sent over the internet?

No. The PassNote web password generator runs entirely inside your browser using the Web Crypto API (window.crypto.getRandomValues). Generated passwords are never transmitted or logged.

How long should a strong password be?

We recommend at least 16 to 20 random characters combining uppercase letters, lowercase letters, numbers, and symbols for important accounts.

Does the PassNote mobile app include an offline password generator?

Yes. PassNote on iOS and Android includes a built-in cryptographically secure password generator that works offline and lets you save new credentials directly to your encrypted vault.

ON-DEVICE CRYPTOGRAPHIC RANDOMNESS

Stronger passwords.
Zero guesswork.

Human-picked passwords follow predictable patterns. Create unpredictable, high-entropy passwords right in your browser—or generate and save them directly inside the PassNote app on iOS and Android.

100% Client-Side Web Crypto Zero Network Transmission

Save Passwords in PassNote App Read the Entropy Guide

Generated Password Browser Local

K9#mP2$vL8@nQ4!xR7&w

~124 bits of entropy · Local Web Crypto

Password Length 20

Uppercase (A–Z) Lowercase (a–z) Numbers (0–9) Symbols (!@#$...)

Estimated Strength Strong

Generated locally in your browser. Never sent over the network.

THE SCIENCE OF STRONG PASSWORDS

Why length and randomness
beat clever tricks.

Swapping an “E” for a “3” or adding “!” to a pet’s name no longer slows down modern password-cracking hardware. True protection comes from mathematical entropy.

1. Prioritize Length (16–20+ Chars)

Each additional random character multiplies the number of possible combinations by the size of your character pool. Moving from 8 to 20 characters increases cracking difficulty exponentially.

2. Use True Cryptographic Randomness

Humans naturally choose dictionary words, keyboard walks, or dates. A cryptographic random generator selects every character independently so attackers cannot use dictionary rules.

3. Never Reuse Across Accounts

Even a 24-character password becomes unsafe if reused on multiple websites. If one service suffers a breach, unique passwords isolate the impact to that single account.

Password Style	Example Pattern	Approx. Entropy	Recommended Use
8 Chars (Letters only)	`kQvBnRtM`	~45 bits	Avoid for important logins
12 Chars (Mixed 4 sets)	`R7#mK2$vP9@x`	~74 bits	Everyday low-risk accounts
20 Chars (PassNote Default)	`K9#mP2$vL8@nQ4!xR7&w`	~124 bits	Email, banking, cloud & work
32 Chars (Maximum Pool)	`32 random mixed characters`	~198 bits	Master keys, crypto & admin