Browser Password and Passphrase Generator Audit
 Share
The version of the browser you are using is no longer supported. Please upgrade to a supported browser.Dismiss

 
View only
 
 
ABEFGHIJKLMNOPQRSTUVWXYZ
1
ScoreName/LinkLicenseGeneratorTypeCRNGUniformHTTPSEntropyMobileTrackersSRINotes
2
10Aaron ToponceOpen SourceClientRandomYesYesYes70YesNoN/AFull disclosure- personal generator.
3
10Privacy ToolsOpen SourceClientRandomYesYesYes190YesNoN/AFully self-contained in a single HTML file for portability.
4
9Grégory PaulOpen SourceClient
Deterministic
YesYesYes101YesNoN/AChoice of scrypt or Argon2. Unless provided, static salt.
5
9LessPassOpen SourceClient
Deterministic
YesYesYes104YesNoN/A
6
8.5Pass ComboOpen SourceClient
Deterministic
YesYesYes90YesDependsN/AOnline version has trackers. Download offline without.
7
8ClavemOpen SourceClient
Deterministic
YesYesYes128YesNoNo
8
8Dave CassettariOpen SourceClient
Deterministic
NoYesYes256YesNoN/AUses the British pound symbol "£" as possible output
9
8Generate Password 2017Open SourceClientRandomNoNoYes95YesNoN/A
The landing page of https://addons.mozilla.org/en-US/firefox/addon/generate-password/. Claims MPL v2.0
10
8Get VaultOpen SourceClient
Deterministic
NoYesYes130YesNoN/A
11
8Maarten BillemontOpen SourceClient
Deterministic
YesYesYes49YesNoN/AComputationally intensive. Sort of mobile, but too intensive on modern phones.
12
8MasterPassXOpen SourceClient
Deterministic
YesYesYes48YesNoN/A
13
8One Shall PassOpen SourceClient
Deterministic
NoYesYes72YesNoN/ASee also passphrase version.
14
8Pain-free PasswordsOpen SourceClient
Deterministic
YesYesYes101NoNoN/A
15
8RoboFormProprietaryClientRandomYesYesYes88YesYesN/Ahttps://twitter.com/AaronToponce/status/981193129280745473
16
8SS64 (15 characters)Open SourceClient
Deterministic
NoYesYes90YesNoN/A
17
8SS64 (20 characters)Open SourceClient
Deterministic
NoYesYes120YesNoN/ABased on SHA-256. 20 character version
18
8SSH Communications SecurityProprietaryClientRandomYesYesYes96YesYesYes
19
8Strong Password GeneratorProprietaryClientRandomYesYesYes98YesYesN/A
20
8vPassOpen SourceClient
Deterministic
NoYesYes74YesNoN/AUI is wonky. Must refresh page for each password.
21
7.5SS64 (10 characters)Open SourceClient
Deterministic
NoYesYes60YesNoN/ABased on SHA-1. 10 character version
22
7.5Stanford PwdHashOpen SourceClient
Deterministic
NoYesYes60YesNoN/A
23
7.5Stephen OstermillerProprietaryClientRandomYesNoYes66YesNoN/A
24
7Alan KarpOpen SourceClient
Deterministic
NoYesYes70NoNoN/A
25
7Amit AgarwalOpen SourceClient
Deterministic
YesYesYes32YesNoNoMinimum entropy is 25-bits with 4 characters.
26
7Chen YufeiOpen SourceClient
Deterministic
NoYes
Not Default
96YesNoN/AFork of One Shall Pass
27
7DuckDuckGoOpen SourceServerRandomYesNoYes48YesNoN/A
28
7Hasło WygasłoOpen SourceClient
Deterministic
NoYesYes90YesYesN/A
29
7Michael MeiselOpen SourceClient
Deterministic
NoNoYes98YesNoN/A
30
7Michal SukupčákOpen SourceClient
Deterministic
NoYes
Not Default
192YesNoN/A
31
7Tim StampProprietaryClientRandomYesNoYes203YesNoNoEntropy from smallest pw.
32
6.5Pass IDProprietaryClient
Deterministic
NoYesYes63YesNoN/A
33
6Andrick SantosOpen SourceClientRandomNoNoYes209YesYesNoHas chat script loaded for support?
34
6Intuitive PasswordProprietaryClientRandomNoNoYes119YesYesN/AAlso a browser password manager, but generator is outside the management app.
35
6LunixPwnProprietaryClientRandomNoNoYes340YesNoNoAccount Suspended. Offline.
36
6Nic Wolff (current)ProprietaryClient
Deterministic
NoYesNo78YesNoN/ABased on SHA-1.
37
6PassCodesProprietaryServerRandomYesUnknownYes131YesYesN/AAd blocker blocker prevents you from using the site. Claims quantum random.
38
6Passwd RocksProprietaryServerRandomUnknownUnknownYes95YesNoN/AHas a few different endpoints for password generation. Useful for scripts.
39
6Sérgio Dinis LopesProprietaryClient
Deterministic
NoYesNo80YesNoN/ADeterministic domain-based generator. SHA-1 output is raw binary bytes.
40
6Single PassProprietaryClient
Deterministic
NoYesYes95YesYesN/A
41
6ThycoticProprietaryClientRandomYesNoYes72YesYesNoAnnoying sales chat popup if you stay on the site long enough.
42
6Tom Van VleckOpen SourceClientRandomNoUnknownNo36YesNoN/A
43
5.5Knut AhlersOpen SourceServerRandomNoNoYes65YesNoNo
Overly restricts what the password can be with filtering rules. Entropy is an estimation from zxcvbn.js.
44
5.5Remko TronçonProprietaryClientRandomYesUnknownYes64YesYesNo
45
5CNILOpen SourceClient
Deterministic
NoYesYes31YesYesNo
Converts a phrase by using the first character of each word. Entropy based on 2.62 bits per word.
46
5DeadboltOpen SourceClient
Deterministic
NoYesNo92YesYesNoDoesn't actually use a randomness function
47
5Gibson Research CorporationProprietaryServerRandomUnknownUnknownYes256NoNoN/A
48
5Nex-TechProprietaryClientRandomNoNoYes26YesYesN/A
49
5Nic Wolf (MD5 hex)ProprietaryClient
Deterministic
NoYesNo32YesNoN/A
50
5Nic Wolff (SHA-1 1a)ProprietaryClient
Deterministic
NoYesNo48YesNoN/A
51
5Nic Wolff (SHA-1)ProprietaryClient
Deterministic
NoYesNo48YesNoN/A
52
5Oleg EterevskyOpen SourceClient
Deterministic
NoYesNo52YesYesN/A
53
5Passwds NinjaOpen SourceClientRandomNoNoYes28YesYesNoHTTP->HTTPS redirect, but no supported cipher suite available.
54
5PWGenProprietaryClientRandomNoNoYes72NoYesN/A
55
5
Strong Random Password Generator
ProprietaryClientRandomNoNo
Not Default
100NoNoN/AToo many knobs, switches, and buttons. Confusing UX.
56
4.5Bruce GuenterProprietaryServerRandomUnknownUnknownYes69NoNoN/A
57
4.5Erik HeuschProprietaryClientRandomNoNoYes64NoYesN/AOther randomness functions on the site
58
4.5LastPassProprietaryClientRandomUnknownUnknownYes62YesYesNoUX may be a bit intimidating.
59
4.5Neal AgarwalProprietaryClientRandomNoNoYes55YesYesNoEmoji generator. Use with caution.
60
4.5Password ChameleonProprietaryClient
Deterministic
NoYesYes60NoYesN/A
61
4DalenryderProprietaryClientRandomNoNoNo47YesNoNo
62
4DashlaneProprietaryServerRandomUnknownUnknownYes104YesYesNo
63
4HyperioneProprietaryClientRandomNoNoYes41YesYesNoRussian language page.
64
4Iconic PasswordsProprietaryClient
Deterministic
NoYesYes34YesYesNo
Not desktop friendly. Best viewed on mobile devices. Browser extensions and mobile OS apps available.
65
4Jordan WiensProprietaryClient
Deterministic
NoYes
Not Default
32NoNoN/ACSS is broken
66
4MSD ServicesProprietaryServerRandomUnknownUnknownYes49YesYesYes
67
4Ravina VermaProprietaryClientRandomNoNoNo34YesYesN/A
68
4Robert AccetturaProprietaryServerRandomUnknownUnknownYes35YesYesN/A
69
4SecureSafe ProProprietaryServerRandomUnknownUnknownYes95YesYesNo
70
4Tyler AkinsProprietaryClientRandomNoYesNo33NoYesN/ANot mobile-friendly with mouse-based entropy.
71
4Wight Hat, Ltd.ProprietaryClientRandomNoNoNo98YesYesNoHas QR Code for sending password to mobile device.
72
3.5Free Password GeneratorProprietaryClientRandomNoNoNo58NoYesN/A
73
3APG OnlineProprietaryServerRandomUnknownUnknownNo45NoNoN/A
74
3Fast Password GeneratorProprietaryServerRandomUnknownUnknownYes0YesYesNoUsers can generate 1-character passwords.
75
3GaiJinProprietaryServerRandomUnknownUnknownYes37NoYesN/APassword format: VcvcvcvcvNNN, without [BCcDFHJjKLMNPQqRSTVWXxYyZz]
76
3HashapassProprietaryClient
Deterministic
NoUnknownNo48YesYesN/A
77
3Jon WinstanleyProprietaryClient
Deterministic
NoUnknownNo32YesYesN/ADoes not display fonts in Firefox. UI is really strange. Entropy from smallest pw.
78
3MaordProprietaryServerRandomUnknownUnknownYes77NoYesNo
79
3Password BossProprietaryServerRandomUnknownUnknownYes49YesYesNo
80
3Password DogProprietaryClient
Deterministic
NoNoYes40YesYesNoUses cookies.
81
3Stefan FreiProprietaryServerRandomUnknownUnknownNo98NoYesN/A
82
3Tony LieuallenProprietaryClientRandomNoNoYes14NoYesNo
83
2.5The BitmillProprietaryClientRandomNoNoNo65NoYesNo
84
2Adam FarrarProprietaryServerRandomUnknownUnknownNo33NoYesN/A
85
2DinoPassProprietaryServerRandomUnknownUnknownNo28YesYesNo
86
2DomainDiagnosisProprietaryServerRandomUnknownUnknownYes41NoYesNo
87
2Free Passwords GeneratorProprietaryServerRandomUnknownUnknownNo31YesYesNo
88
2Greg RenzaProprietaryClientRandomNoNoNo31NoYesNo
89
2Hugh ChouProprietaryServerRandomUnknownUnknownNo0NoYesN/A0-bits, because the generator is still human-based.
90
2Koshevoy DmitryProprietaryServerRandomUnknownUnknownNo40YesYesNoPassword format: LLLDDDUUSL, where "S" is special characters !, $, ., @, #, +.
91
2Norton Identity SafeProprietaryServerRandomUnknownUnknownYes40NoYesNoSite gives 404- offline?
92
2Passwords Generator XYZProprietaryServerRandomUnknownUnknownNo52NoYesN/A
93
2Random.orgProprietaryServerRandomUnknownUnknownYes25NoYesNoThe TRNG has not been independently tested for bias.
94
2Stefan SchollProprietaryServerRandomUnknownUnknownNo26NoYesN/A
95
2WebpageFXProprietaryServerRandomUnknownUnknownYes28NoYesNo
96
2Whats My IPProprietaryClientRandomNoNoNo40NoYesNo
97
98
99
100
Loading...
Main menu