The workshop · The security corner
The security cornerBuild a passphrase
Six random words beat an eight-character password, and the tool PROVES it by the arithmetic. It also says what is useless: the capital and the separator are worth zero bits.
No input: this tool builds
This tool asks for no file and no text: it DRAWS words at random, on your device. Set what you want, then build.
What this tool builds is never transmitted
The result is built inside your browser, on your device, and it is sent nowhere. Nobody but you ever sees it, and nothing is kept once the tab is closed. No server ever had to know it.
Checkable in ten seconds, without taking our word for it:
- Open your browser's inspector: the F12 key (or Ctrl+Shift+I, or Cmd+Option+I on a Mac).
- Go to the “Network” tab, then clear the list.
- Run the tool on this page, as many times as you like. The list stays empty: no request goes out.
- To go further: cut your connection, and do it again. The tool still builds.
This absence of requests is also checked BY MACHINE before every release: a lock drives a real browser, processes a real file, and refuses to publish if a single byte goes out.
Going further
This tool receives nothing at all: no file, no text. So there is nothing to send, even by mistake. It is the only tool in the workshop in that position, and it is why its trust banner talks about what it BUILDS rather than what you drop in.
VerifyThe proof, step by stepThe network inspector check, explained one gesture at a time, with screenshots.
The cornerThe security cornerThe other tools in this corner of the workshop.
UnderstandHow this is builtThe formats actually handled, browser by browser, and what we ruled out.