How Nodeblue Password Generator works

Random mode combines enabled sets (uppercase, lowercase, numbers, symbols, emojis), applies optional exclusion filters, and can require at least one character from each selected set.

Optional pattern checks block consecutive duplicates and simple sequences where possible, with bounded retry attempts to avoid stalls.

Passphrase mode draws from a local dictionary and supports word count or optional target length ranges, plus controls for separators, casing, numbers, symbols, emojis, and light leetspeak transforms.

The dictionary file is lazy-loaded so initial page load stays fast. The browser verifies that file with a pinned integrity hash (SRI) before execution, which helps detect asset-level tampering when the page itself remains trusted.

Entropy uses dictionary metadata when available, with a safe fallback to the EFF Diceware baseline when metadata is unavailable.

Builder mode creates passwords from ordered pill tokens: word, number, symbol, character, separator, and literal text. Each token has its own options, and output is generated token-by-token.

This is useful for systems with exact format rules that generic random generation cannot easily satisfy.

Links encode settings in the URL hash, not generated passwords. Hash-based state allows preset sharing without sending secrets to a server.

This tool cannot protect against endpoint compromise such as malware, keyloggers, clipboard leaks, or phishing pages. Treat generated credentials with the same operational care as any secret.