Security

Three primitives, three different jobs

Passwords authenticate a person, hashes verify that data has not changed, and UUIDs identify a thing without saying anything about it. Confusing them is the origin of most practical security bugs: storing a password with SHA-256 instead of a slow KDF, using a UUID as an access token, or assuming a hash hides its input.

What "generated locally" buys you

Every generator on this page uses the browser's cryptographic random source (crypto.getRandomValues), not Math.random. Nothing is transmitted, and no value is stored anywhere — including in this site's own logs, which never see a request because the generation happens after the page has loaded.

The part that is still your job

A strong secret is only as good as its handling. Use a password manager so every site gets a different one, turn on two-factor authentication wherever it exists, and remember that length defeats brute force far more efficiently than symbol substitution does.