About NewPw
A free, open-source password generator that runs entirely in your browser. No accounts, no tracking, no servers ever see your password.
Why this exists
The web is full of password generators. Most are run by companies whose real product is a paid password manager — the generator is a marketing funnel. Several others quietly send the generated value to an analytics endpoint, or rely on third-party JavaScript that could be compromised.
NewPw is the opposite of that. It is one static HTML file. It uses the browser’s built-in cryptographic random source and nothing else. There is no signup, no upsell, no telemetry on the values you generate. You can save the page and use it offline.
Design principles
- Generation happens in your browser. Passwords are produced by
window.crypto.getRandomValues— the same cryptographically secure source used for TLS key material in your browser. - No password leaves your device. No network request carries it. No analytics event records it. Closing the tab erases it from memory.
- Static and auditable. One HTML file, no build step, no third-party JavaScript bundles. If it works once, it’ll keep working — including offline.
- Standards over hype. Defaults are aligned with NIST SP 800-63B: long credentials, no forced rotation, no silly composition rules.
- Multilingual passphrases. Memorable phrase mode uses the official BIP39 wordlists for English, Spanish, French, Italian, Portuguese, and Czech.
Who built this
NewPw is built and maintained by Michal Rothanzl. It’s a small personal project, not a company. If you’d like to report a bug, suggest a feature, or report a security issue, see the security page for contact details.
What NewPw is not
- It is not a password manager. It does not store, sync, or remember anything for you. Use a dedicated manager (Bitwarden, 1Password, KeePassXC) for storage.
- It does not check passwords against breach corpora. Tools like Have I Been Pwned are appropriate for that.
- It does not implement two-factor authentication.