Real secure randomness
The generator uses Web Crypto, the browser feature intended for security-sensitive random values.
Make a password worth
keeping secret.
Create a strong random password or a six-word passphrase. Every result is made locally with your browser's secure random-number system.
Nothing leaves your browser. Generated results are not uploaded, logged, stored, or added to page history.Version 2.0.1 · Stronger six-word passphrases and faster phone copying.
01
Make one, then save it safely
Use a password manager to save a unique password for every account.
Six unrelated words are chosen from a 7,776-word list. No word repeats in one result.
Your generator choices are remembered. Generated results never are. Reset asks before clearing your saved controls.
A safer default
01
02
03
Random beats clever.
Six genuinely random words
Readable mode chooses six unrelated words from a 7,776-word list instead of assembling a familiar quote or sentence.
One account, one password
The biggest practical upgrade is giving every account a different password and keeping it in a trusted manager.
Password questions.
Can HandyPebble see the generated password?
No. Generation happens in your browser. The result is not sent to HandyPebble or saved by this page.
Is a longer password better?
Generally, yes. Length, randomness, and uniqueness all matter. A unique 16- to 20-character random password is a strong default when a site allows it.
Should I use a passphrase?
Passphrases are useful when you must type or remember the secret. This tool chooses six unrelated words from the EFF long Diceware word list. For ordinary website logins, a random password stored in a password manager is usually simpler.
Does the strength estimate guarantee safety?
No. It is a conservative mathematical estimate for this generator, not a promise. Account security also depends on uniqueness, safe storage, multi-factor authentication, and the service itself.