MyPassGen
Why passwords should be generated in the browser, how to check strength on this device, and how to strip trackers before you send a link. Each piece answers one question and gives steps you can verify on the spot.
Why passwords should be generated in the browser, how to check strength on this device, and how to strip trackers before you send a link. Each piece answers one question and gives steps you can verify on the spot.
A key written as ?key= lands in Nginx, WAFs, and access logs. Browsers, by spec, do not send the fragment after # to the server. Compare query parameters with fragments, then confirm it in the Network panel.
If an online password generator, strength check, or file encryptor runs on a server, the plaintext window grows. Web Crypto keeps the work on this device. Use the Network panel to see whether anything left.