- Random mode uses your browser's
crypto.getRandomValues(CSPRNG). - Deterministic mode derives per-site passwords via PBKDF2-HMAC-SHA256 (Web Crypto API); the master secret is never stored.
- Pronounceable mode creates easier-to-read passwords by alternating vowels and consonants.
- Increase PBKDF2 iterations for more resistance (slower).
- Enable “Require each class” for policy compliance (short lengths may constrain randomness).
- Clipboard auto-clears after the configured time.
- Only preferences (not secrets) are saved to your browser's
localStorage.