Random, memorable, or PIN — generated entirely in your browser. Nothing you create here is ever sent to a server.
Weak, reused passwords are still the #1 way accounts get breached. Passivato generates truly random passwords in seconds using the Web Crypto API — no patterns, no dictionary words, no guesswork.
It all happens in your browser. Your passwords are never sent to a server, never logged, never stored — by us or anyone else.
Three things: length (16+ characters), true randomness, and character variety across uppercase, lowercase, numbers, and symbols. Passivato's defaults enforce all three.
Random strings are maximum security — best for a password manager. Memorable passphrases like correct-horse-battery-staple trade a little entropy for something you can actually type, and at 4+ words they're still very strong.
Yes — Passivato is 100% free, with no sign-up, no ads, and no usage limits. There's no premium tier or paywall; every mode (Random, Memorable, PIN) and the strength tester are fully available from the first visit.
No. Password generation happens entirely in your browser using the Web Crypto API's crypto.getRandomValues(). Nothing you generate is ever sent to, logged by, or stored on Passivato's servers — there's no network request involved in creating a password.
Use at least 16 characters for most accounts, and 20+ characters for high-value accounts like email, banking, or your password manager's master password. Length matters more than complexity: a longer password is exponentially harder to crack even with simple character rules.
A memorable password (or passphrase) strings together several random, unrelated words with a separator — for example correct-horse-battery-staple. It's easier to type and recall than a random string, and at four or more words it carries enough entropy to resist brute-force attacks.
Only if you're typing the password by hand — excluding look-alike characters like 0, O, l, 1, and | prevents transcription errors. If the password will be saved directly into a password manager and never typed manually, there's no security reason to exclude them.
Entropy measures how unpredictable a password is, expressed in bits — the higher the number, the harder it is to guess or brute-force. A random password needs roughly 80+ bits of entropy to be considered very strong; Passivato's default settings comfortably exceed that for any length of 16 characters or more.