A privacy-first password generator that runs entirely in your browser. Zero servers, zero logging, zero compromises. crypto.getRandomValues randomness, HIBP breach check via k-anonymity, encrypted history with AES-GCM.
Strong, single-purpose, fast. Pin it once, click it forever.
8 to 128 characters. Toggle character classes. Skip ambiguous lookalikes (l, 1, I, O, 0). Custom symbol sets for picky sites.
3 to 10 words from a curated 1,910-word English wordlist. Hyphen, space, digit, or symbol separators. Memorable, typeable, and bulletproof.
Alternating consonant-vowel patterns you can dictate over the phone or read off a printed handout.
Generate up to 500 unique passwords at once. Export as CSV ready to import into 1Password, Bitwarden, or any password manager.
Verify against 800M+ leaked credentials using k-anonymity. Only the first 5 hex chars of the SHA-1 hash hit the API. Your hash never leaves the device.
Last 5 passwords on Free, last 100 on Pro. Encrypted at rest with AES-GCM. Optional master phrase for cross-restart persistence.
Three guarantees, all auditable in the source bundle.
True cryptographic randomness from your browser's WebCrypto API. We never use Math.random and never seed the RNG.
Only the first 5 hex characters of the SHA-1 hash are sent. The full hash is never transmitted. Your password is never even hashed remotely.
Saved passwords are encrypted with a session key. Optional master phrase via PBKDF2 (250,000 iterations). Decryption stays in-browser.
Free is genuinely useful. Pro unlocks the power tools.
If yours isn't here, email support@peakproductivity.online.
Yes. We use crypto.getRandomValues with rejection sampling to avoid modulo bias. We never use Math.random. The browser's WebCrypto API is the same source banks and password managers rely on.
No. Generation happens 100% inside the popup. The optional breach check uses k-anonymity (only the first 5 chars of the SHA-1 hash are sent), so the actual hash of your password is never transmitted.
Just "storage" (for settings + encrypted history) and host_permissions for peakproductivity.online (license verify) and api.pwnedpasswords.com (optional breach check). No tab access, no content scripts, no clipboard read.
Same Pro features. Monthly is $1.99/mo. Lifetime is $7.99 once. Lifetime pays for itself in four months.
Within 30 days of purchase, yes. Email support@peakproductivity.online and we will refund, no questions asked.
All Free generation works offline. Pro license verification and the HIBP breach check both require network access , but generation itself never does.