Generated in your browser • No registration

Secure Password Generator with One-Time Link Sharing

Generate a cryptographically strong password locally in your browser and package it into a self-destructing link in one click.

Password generator settings

1 view • Expires in 24 hours

16 characters
864

Until you create a link, the password stays in this tab’s memory. When sharing, the server receives ciphertext, not your password.

Your clipboard may sync across devices. Avoid copying passwords on a shared computer.

How to create and share a password securely

  1. Start with randomness

    Choose 16 or more characters and the sets your service accepts. The generator uses window.crypto.getRandomValues(): your browser produces the result without requesting a password from a server.

  2. Encrypt before sending

    Select “Encrypt & Create One-Time Link”. AES-256-GCM protects the password before anything is uploaded; the decryption key is not sent to the server with the ciphertext.

  3. Send the link

    Share through Telegram, Slack, or email. By default, the link and key are separate. Explicitly opening the secret consumes its single view and removes the stored record. It cannot erase a copy the recipient has already saved.

Why ordinary password generators solve only half the problem

A long random string still needs a safe way to reach someone. Paste a staging password into a team chat and it can outlive the staging environment itself. Here, generation and delivery belong to the same short workflow.

Cryptographic randomness, not a shortcut

WebCrypto uses the browser’s cryptographic generator, seeded from system entropy sources. Password generation never uses Math.random(). Characters and words are selected uniformly, without modulo bias.

Nothing sent during generation

Length, character sets, and the finished password are handled locally. Once the page is loaded, generation keeps working without a network connection. Creating a shareable link does need a connection.

A link in the chat, not a plain password

There is no exposed password to find in message history. The link remains, but once its view is consumed the server no longer serves the record. Send the username and service address through a separate channel where possible.

Previews do not consume the view

Telegram, Slack, and Discord preview bots receive a neutral page rather than the note’s content. Reading requires an explicit action in the recipient interface. This does not protect a compromised recipient device.

Password generator FAQ

For a typical service, start with a unique random password of at least 16 characters. For a master password, consider 24 or more characters or 6 randomly chosen words. These are practical starting points, not a universal guarantee. Follow the service’s requirements and enable MFA. Generate API keys and cryptographic keys with the relevant platform’s tools: a random password cannot replace them.
Generation happens locally in this tab’s memory and works without a network connection after the page loads. Passwords are not written to localStorage, cookies, or the page URL. Only when you create a link is ciphertext sent to the server, where it remains until the single requested view or the 24-hour expiry. The plain password is not uploaded.
It is the browser’s cryptographic generator, seeded from system entropy sources. Unlike Math.random(), it is intended for security-sensitive uses. Strength still depends on length, alphabet or dictionary size, and a secure device. This generator converts random values into indices without statistical bias.
Select “Encrypt & Create One-Time Link” to get a note with one view and a 24-hour lifetime. The key is shown separately by default. Send the link and key through independent channels, and keep the username and service address separate from the secret. Verify that you are speaking to the intended person before handing over access.
A random character password is convenient for a password manager. Independently selected words are easier to type by hand; this tool offers 4 to 6 English words, with 6 recommended for important uses. A quotation or a sentence you invent is not equivalent to a random passphrase. For API access, use a token issued by the service rather than a generated password.