Privacy & Terms

Your Passwords

Every password, passphrase, PIN, username, and Wi-Fi QR code is made in your browser. None of them is sent to us, stored, or logged. That includes anything you type into the strength checker.

The one exception is a check you start yourself: “Check all known breaches” on the strength checker sends the first 5 characters of the password’s SHA-1 fingerprint to Have I Been Pwned, never the password itself.

Visit Statistics

Matomo, for everyone. We count visits with Matomo, which runs on our own server and uses no cookies. It records the page you visit, when, the page you came from, your browser and type of device, your country, and a shortened form of your IP address (the last two parts are removed before it is stored). Settings you choose, such as a password length, can appear in the page address it records. Anything you type, such as a word for a username, is removed first.

Google Analytics, with your permission in Europe. Outside Europe, and in Europe only after you choose Accept, we also use Google Analytics, which sets cookies. It records the same kinds of information, plus which buttons are used, such as Copy or Download, but never what a password, name, or message says. Google keeps this data for up to 14 months. To change your choice at any time, use Cookie settings at the bottom of any page.

Feedback

If you send feedback through the feedback form, we receive your message, your email address if you give one, your country, your browser, and a scrambled form of your IP address that cannot be turned back into it. We use it only to fix problems, to improve the site, and to reply when you ask us to.

Saved in Your Browser

A few things are saved in your browser’s own storage, so the site remembers them: your light or dark choice, your cookie choice, the usernames you star in the username generator, and a copy of the pages you open, so the tools keep working offline. None of it leaves your device, and clearing this site’s data in your browser removes it.

Servers

Like every website, the servers that deliver these pages, and Cloudflare, which protects them, keep short technical logs of requests (IP address, page, and time) to keep the site running and safe from attacks.

What We Never Do

We never receive a password you make here. We don’t sell or rent personal data, we don’t use advertising trackers, and we don’t build profiles of visitors.

Your Rights

You can ask what we hold about you, ask us to correct or delete it, or object to how it is used. Send your request through the feedback form, and include an email address so we can reply. You can also complain to the data protection authority where you live.

Terms of Use

PassGen.co is free to use. The tools are provided as they are, without any warranty, and we are not liable for any loss that comes from using them. You are responsible for how you use and store the passwords you make. Don’t use the site to break the law, or to attack it or anyone else. We may update this page from time to time.