About the tool

Security you can inspect.

KeyForge is a free, no-nonsense password generator built for the moment you need a strong credential—without asking you to trust a server.

What KeyForge is

It is a static website made with plain HTML, CSS, and JavaScript. It generates random passwords and passphrases directly on your device. There are no accounts, dashboards, or hidden services.

Why it is trustworthy

Password generation uses the browser’s crypto.getRandomValues() API with rejection sampling to avoid modulo bias. The generator guarantees at least one character from every enabled set and never falls back to insecure randomness.

Small enough to audit

There are no frameworks, CDN scripts, analytics packages, or runtime dependencies. The generation logic is isolated and unit tested. Review the KeyForge source on GitHub.