correcthorsebatterystaple

xkcd-style password generator that avoids external scripts and analytics

Repository activity
  • Stars78
  • Forks11
  • Open Issues18
License

AGPL-3.0

Languages
  • JavaScript
  • EJS
  • SCSS
correcthorsebatterystaple screenshot

About correcthorsebatterystaple

correcthorsebatterystaple generates easy-to-remember xkcd-style passwords with a cryptographically secure random number source. It is meant to avoid insecure generators that rely on Math.random() and to give users a tool that is open sourced and auditable.

It runs entirely in the browser and loads no external scripts and no analytics, so it does not track who uses it or how many people use it. Passwords are assembled client side from a word list, and you can adjust the number of words to trade memorability against strength.

The generator is delivered as a website at correcthorse.pw and is fully open sourced so anyone can audit how it produces passwords. It is offered only as a hosted web tool, with no separate desktop or mobile app.

Key features

  • xkcd-style password generation
  • Uses a cryptographically secure random number source
  • Loads no external scripts and no analytics
  • Generates passwords client side in the browser
  • Fully open sourced and auditable

Details

First released
2018
Platforms
Web
Telemetry
None
Deployment
cloud
Website
correcthorse.pw
License
AGPL-3.0