Privacy
No cookies, no analytics, no ads and no accounts. This is everything that happens with your data.
Your passwords
Passwords, passphrases and PINs are created in your browser and never sent to any server, ours included. We cannot see, store or recover them.
What you type into the checker is also analyzed in your browser. To search for it in breaches, the first 5 characters of its SHA-1 fingerprint are sent to Have I Been Pwned. Hundreds of different passwords share that fragment, so it does not reveal which one was yours.
What is stored in your browser
We use your browser’s storage (not cookies) for three things:
- the theme you choose (light, dark or automatic);
- each tool’s settings (length, character types, number of words), so you find them the same next time;
- the history: the passwords you copy, so you can get them back while you work. They are kept only in that tab (session storage) and the browser erases them when you close it. You can also empty it with the history’s “Clear” button.
Passwords you generate but do not copy are not stored anywhere. None of this leaves your browser or reaches our server, and you can delete it at any time from your browser’s settings.
What the server sees
Like any website, our hosting provider keeps technical logs of the requests it receives (IP address, page requested, date and browser) to keep the service running and protect it from abuse. We do not use those logs to analyze your behavior and we do not share them with anyone.
Third parties
We load nothing from other domains: no Google Fonts, no analytics, no social media buttons. The “Share” links are plain links; social networks only receive something if you click one. The only external connection is the checker’s request to api.pwnedpasswords.com, described above.
Contact
The site is run by MegaOryx. For any privacy question, get in touch through their website.