xkcd-style password generator that avoids external scripts and analytics
- Stars78
- Forks11
- Open Issues18
AGPL-3.0
- JavaScript
- EJS
- SCSS

About correcthorsebatterystaple
correcthorsebatterystaple generates easy-to-remember xkcd-style passwords with a cryptographically secure random number source. It is meant to avoid insecure generators that rely on Math.random() and to give users a tool that is open sourced and auditable.
It runs entirely in the browser and loads no external scripts and no analytics, so it does not track who uses it or how many people use it. Passwords are assembled client side from a word list, and you can adjust the number of words to trade memorability against strength.
The generator is delivered as a website at correcthorse.pw and is fully open sourced so anyone can audit how it produces passwords. It is offered only as a hosted web tool, with no separate desktop or mobile app.
Key features
- xkcd-style password generation
- Uses a cryptographically secure random number source
- Loads no external scripts and no analytics
- Generates passwords client side in the browser
- Fully open sourced and auditable
Details
- First released
- 2018
- Platforms
- Web
- Telemetry
- None
- Deployment
- cloud
- Website
- correcthorse.pw
- License
- AGPL-3.0