PassForgePasswords

Strong passwords, trusted to no one.

PassForge generates truly random passwords, tells you how long they would take to guess, and checks whether they have already leaked, without ever sending them.

€9Opening soon

incl. VAT · one-off · no subscription

Get notified All tools

● passforge.html — offline

Screenshot of PassForge: generator settings and a generated password with its time to guess

1–20passwords at once

0network requests

127bits of entropy at 20 characters

2languages, EN and FR

Features

Three questions, three answers.

Generate

1 to 20 passwords at once, or passphrases made of words. Ambiguous characters left out if you wish, symbols a site refuses removed.

Test

Paste a password: PassForge estimates its strength and how long it would take to guess. It stays in your browser.

Check for a leak

Only a short prefix of its SHA-1 fingerprint is used for the search, and you open the link yourself. The password never leaves.

What you get

One file, two languages.

passforge.zip: the page in English and French, a read-me and the licence.
Opens in any recent browser, even offline.
No account, no installation, no data sent.
The version you buy and fixes to its bugs.

What it does not do

Honest limits.

The strength test is an upper-bound estimate: it does not know passwords that have already leaked.
A strong password reused elsewhere is still dangerous: one password per service and two-factor authentication are still needed.
It is not a password manager: it keeps nothing.

FAQ

Frequently asked questions

Why a file rather than a website?

Because a password should not be typed on someone else's server. The file runs on your machine, offline, and the page forbids any connection.

Are the passwords really random?

Yes: they come from your browser's secure random generator (crypto.getRandomValues), the one used for encryption. They are neither sent nor stored.

When can I buy it?

Soon. Sign up below: one single message when sales open.

Waiting list

Get notified at launch.

Leave your e-mail and the tool you are interested in. One message when sales open, nothing else.

WebGuard Tools

The other tools

SecretScan

Before you publish

Finds access keys, passwords and sensitive files left in a text or a folder, before you publish or send it. Values stay masked; replacement advice included.

€19Opening soon

FileCheck

Suspicious file

Before opening an attachment: misleading extension, archive contents, hidden executable, fingerprints to compare with the publisher's.

Gives clues; it is not an antivirus.

€12Opening soon

CryptoSign

Signing

Signs and verifies a file or a text, with keys generated on your machine and a password-protected private key. No command line.

Not a qualified eIDAS signature.

€15Opening soon