Passy Pro uses client-side cryptography to ensure your secrets never leave the browser.
- Random mode uses your browser's native
crypto.getRandomValuesfor a true Cryptographically Secure Pseudo-Random Number Generator (CSPRNG). - Deterministic Vault derives mathematically consistent passwords per identity using PBKDF2-HMAC-SHA256 (Web Crypto API). The master key acts as your single point of memory.
- Pronounceable mode generates sequences alternating between vowels and consonants for human-readable outputs.
- Increase PBKDF2 iterations to slow down brute-force attacks at the cost of slight generation delay.
- "Require each class" ensures compliance with strict IT policies. Note: At very short lengths, this slightly constrains true randomness.
- Your clipboard will auto-purge after the configured time to protect against malicious background apps.