A rhythm you can type, built from independent random choices. Longer is the default.
Pronounceability reduces entropy per character. The 8-character compatibility preset has limited security.
8-character compatibility mode: limited security. Choose a longer value for important uses.
Changing an option replaces the current results. Nothing is saved or sent.
Downloads may contain secrets. Protect the file and only export when needed.
Generated entirely in your browser.
Nothing is sent to our server.
Another fresh set, using the same password rules. Each choice stays on your device.
Set the number of choices in the generator’s advanced options. Protect any downloaded secret file.
Each two-letter unit independently chooses its direction: consonant–vowel or vowel–consonant. The consonants are bcdfghkmnprstvz (15 choices); vowels are aeiou (5 choices). That gives 2 × 15 × 5 = 150 equiprobable units. The unit boundaries are fixed every two letters, so a given output reveals exactly one sequence of unit choices. If the letter count is odd, a final random consonant fills the last position.
With no suffixes, the 30-character default has 15 units: 150¹⁵ possibilities, approximately 108.4 bits. Eight characters have only four units: 150⁴ possibilities, approximately 28.9 bits. Excluding look-alikes removes i and o from the vowel pool, leaving 90 units. An optional random digit or symbol occupies a suffix position within the chosen total length; its actual choices are counted, not its position. First-letter capitalization is fixed and contributes zero bits.
Local Web Crypto selects every direction and letter. Some unit boundaries are easier to say than others; this is a typing aid, not a language model. The algorithm is our own documented construction, not a port of Linux pwgen. It never invokes an executable. Read whether pronounceable passwords still make sense before choosing a short preset.
A random-character password packs more uncertainty into fewer characters and suits a password manager. This generator offers a letter rhythm at the cost of length. A six-word passphrase uses familiar words but takes more space. None of these formats protects a secret after it is phished or exposed on a compromised device.
Some legacy workflows accept only short codes. The preset is explicitly lower security and is unsuitable as a general password for important accounts. A limited, temporary code also needs short expiry and enforced attempt limits.
It preserves the idea of easier-to-type random output, not the Linux phoneme algorithm or its command-line behavior. This site uses the browser’s Web Crypto source and publishes a separate, countable generation model.