CipherGuard

Strong passwords, generated and checked in your browser

Generate strong passwords, passphrases, and PINs with WebCrypto; check strength and whether a password has been leaked in a breach — and none of it ever leaves your device. Runs in your browser — your passwords are never transmitted.

100% in-browser · your passwords are never transmitted
✓ WebCrypto randomness✓ No signup✓ Works offline✓ Never transmitted

Generate

Create strong passwords, passphrases, PINs, and pronounceable secrets with WebCrypto.

Generate

Password Generator

Generate strong, random passwords with configurable length and characters. Powered by WebCrypto, with live entropy shown. 100% in your browser — never transmitted. Free.

Generate

Passphrase Generator

Generate memorable 'correct-horse-battery-staple' passphrases from the EFF diceware wordlist. Choose your word count. Strong and easy to type. 100% in-browser. Free.

Generate

Pronounceable Password Generator

Generate passwords that are easy to read and say aloud but still strong, built from random syllables with WebCrypto. Easier to remember, hard to crack. 100% in-browser. Free.

Generate

PIN Generator

Generate random numeric PINs from 4 to 8 digits for banking, phone, and SIM cards, with WebCrypto randomness. No patterns, no repeats. 100% in-browser. Free.

GeneratePro

Bulk Password Generator

Generate dozens or hundreds of strong passwords at once with WebCrypto, then export the batch as CSV, JSON, or .zip. All in your browser — nothing is ever transmitted. Free + Pro.

Check

Score a password's strength and check it against known data breaches — nothing leaves your device.

Check

Password Strength Checker

Check how strong your password really is with zxcvbn real-world scoring, an estimated crack-time, and plain-English tips. The password is NEVER transmitted. 100% in-browser. Free.

Check

Password Breach Checker

Check if your password appears in known data breaches using Have-I-Been-Pwned k-anonymity. Only a 5-char hash prefix leaves your device — your password NEVER does. 100% private. Free.

Policy

Validate a password against configurable NIST-style rules and a common-password blocklist.

Policy

Password Policy Validator

Validate a password against configurable NIST-style rules (length, classes, symbols) plus a common-password blocklist. See exactly what fails. The password NEVER leaves your device. Free.

Updated 17 August 2026

What is CipherGuard?

CipherGuard is a password tool. Checks use k-anonymity. Your full password stays on your device.

  • Generators run in your browser.
  • Your full password stays on your computer.
  • You do not need an account.

How to use it

  1. Pick a generator or checker from the list.
  2. Generate a password, or paste one to check strength.
  3. For breach checks, only a short hash prefix is sent to Have I Been Pwned. The full password stays on your device.

FAQ

What is CipherGuard?

CipherGuard is a free password generator and checker. It runs in your browser.

Do you receive my password?

No. Generation is local. Breach checks send only the first five characters of a SHA-1 hash to Have I Been Pwned.

What is k-anonymity here?

k-anonymity means the API never sees your full hash. Many suffixes share the same prefix. Your browser checks the match locally.

Do I need an account?

No. Open a tool and start.

Does it work offline?

Yes, except the breach check, which needs the public HIBP API.