Passuno · Security guides
Is generating passwords in your browser safe?
A password generator does not need to send passwords to a server. With Passuno, the character or word selection executes locally in your browser.
What local generation means
JavaScript in the browser selects characters or words from a cryptographically secure source. Passuno does not need to receive the final password or store a password history. You can inspect requests using your browser’s developer tools.
Randomness and avoiding bias
Passuno uses crypto.getRandomValues() and rejection sampling to avoid modulo bias. Your settings define the allowed pool, not the generated result. A strength indicator is an estimate rather than a guarantee of safety.
What local generation cannot prevent
Malware, compromised devices, browser extensions with broad permissions and clipboard history can still expose a locally generated secret. Phishing pages can also capture it when you later enter it.
What to do after generation
Check the website address and HTTPS, store passwords in a reputable manager and avoid sharing or reusing them. If you suspect exposure, change affected credentials and review active sessions.
Local generation avoids transferring the newly generated secret to a generator server, but device security and safe account practices still matter.