Password Generator (Offline)
Generate passwords offline.
URWISH Password Generator creates strong passwords on your device using your browser’s secure random number generator. Nothing is uploaded and nothing is stored by URWISH.
Use it for new accounts, Wi‑Fi passwords, temporary credentials, or anywhere you need a fast, trustworthy generator.
How it works (secure randomness)
The generator builds a character alphabet from your toggles (lowercase, uppercase, digits, symbols). It then samples uniformly using crypto.getRandomValues with rejection sampling to avoid bias.
Because it runs locally, you can use it even without an internet connection.
- Randomness source: crypto.getRandomValues (Web Crypto)
- Uniform sampling: rejection sampling (prevents modulo bias)
- Optional: avoid ambiguous characters like 0/O/o and 1/l/I
Recommended settings
For most accounts, longer is better than complicated. A 16–24 character password is a good starting point, especially when stored in a password manager.
- Everyday accounts: 16–20 characters, letters + digits
- High-value accounts: 20–32 characters, include symbols if allowed
- If a site has strict rules: generate here, then adjust the last 1–2 characters
Common use cases
This tool is intentionally “boring” — fast, deterministic, and private.
- New account passwords (email, banking, work apps)
- Router / Wi‑Fi passwords
- Temporary passwords for sharing (change later)
- Throwaway passwords for test environments
Privacy notes
URWISH does not send generated passwords anywhere. Still, treat your clipboard as sensitive: other apps can sometimes read clipboard history depending on OS settings.
Best practice: paste directly into a password manager or the target field, then clear clipboard history if your OS supports it.
FAQ
Are generated passwords stored anywhere?
No. URWISH generates passwords locally in your browser and does not upload or persist them.
Is the randomness secure?
Yes. The generator uses crypto.getRandomValues, which is designed for cryptographic randomness.
Can I use it offline?
Yes. After the page loads once, it works without internet (and works best when installed as a PWA).
Why avoid ambiguous characters?
It reduces mistakes when typing passwords manually (e.g., 0 vs O, 1 vs l).
Does it guarantee at least one digit/symbol/etc?
It samples from the combined alphabet. If you need strict “must include” rules, regenerate until it matches your policy.