Free forever · No account · No tracking
Passwords that pass every compliance audit.
PassGeni generates cryptographically strong, profession-aware passwords—client-side, zero storage, NIST SP 800-63B aligned. Built for teams that get audited.
256-bit minimum entropy
Zero server transmission
NIST SP 800-63B
FIPS 140-3 RNG
Compliance Certificate
PG-8841 · HIPAA §164.312
Issued 2024-01-15 · Valid 90 days
Entropy
128 bits
DNA Score
A+
RNG
FIPS 140-3
Generator Output
C0rt3x#Pr0t0c@l!9Zq
128 bits
NIST ✓HIPAA ✓PCI-DSS ✓SOC 2 ✓
Open Audit — Generation Log
RNGcrypto.getRandomValues(Uint32Array)
POOLupper + lower + sym + num → 94 chars
ENTH = 20 × log₂(94) = 128.4 bits
SEED'cortex' injected (physician)
Compliance coverageHIPAA §164.312SOC 2 Type IIPCI-DSS v4.0NIST SP 800-63BISO/IEC 27001DoD IL2FIPS 140-3Zero Knowledge
How it works
Three inputs. One certified password.
Step 01 — Input
Select your role
Your profession seeds the character vocabulary. Cryptographic strength is identical. Recall improves by 30% vs random.
role → "physician"
seed → "cortex"
pool → medical vocab
30%
recall improvement vs generic generators
Step 02 — Configure
Apply compliance preset
One click configures length minimums, required character classes, and entropy floor for HIPAA, PCI-DSS, SOC 2, ISO, DoD, or NIST.
NISTHIPAAPCI-DSSSOC2ISODoD
6
frameworks auto-configured
Step 03 — Generate
Browser generates & certifies
crypto.getRandomValues() runs entirely client-side. No server round-trip. Nothing transmitted. JWT-signed certificate issued on request.
C0rt3x#Pr0t0c@l!9Zq
128-bit ✓Certified
0 bytes
transmitted to any server
Password Generator
Profession
Length18
Compliance preset
—
0 bits
Live generator
Generate in 3 seconds. Certify in one click.
Built on crypto.getRandomValues() — the FIPS 140-3 source used in hardware security modules. Your profession seeds the vocabulary. The browser does the rest. Nothing leaves your device.
Zero server transmission
The password is never sent anywhere — not even encrypted.
NIST SP 800-63B compliant
Entropy floor, passphrase support, Unicode character sets.
Signed compliance certificate
ES256 JWT proof of generation parameters for audit trails.
6 compliance frameworks
HIPAA, PCI-DSS, SOC 2, ISO 27001, DoD IL2, NIST.
Why PassGeni
What your password actually needs to pass audits.
Entropy · 128-bit floor
Post-quantum resistant by default.
Most generators produce 40–60 bits of entropy. PassGeni enforces a 128-bit minimum — identical to government HSM standards. Post-Quantum mode targets 256 bits, aligning with NIST 2024 guidance on Grover-resistant credentials.
128+
bits minimum — government HSM standard
Zero Knowledge · Client-side only
Your password is never transmitted.
Generation runs in your browser via crypto.getRandomValues(). No server ever processes your credential — not during generation, not during certification.
source → browser
server → never touched
0 bytes
sent to any server, ever
Compliance · 6 frameworks
One click. Full configuration.
HIPAA, PCI-DSS v4.0, SOC 2 Type II, ISO/IEC 27001, DoD IL2, and NIST SP 800-63B. Each preset auto-configures length, character requirements, and entropy floor.
HIPAA ✓SOC2 ✓PCI ✓ISO ✓NIST ✓DoD ✓
6
compliance frameworks auto-configured
Memorability · Profession-aware seeding
30% better recall. Identical security.
A credential is only secure if it's used — not reset within a week. PassGeni seeds each password from domain vocabulary matching your profession. A physician gets medical terms; a developer gets system patterns. Cryptographic strength is identical to pure random output.
Physician
"cortex"
Engineer
"kernel"
Lawyer
"nexus"
Designer
"bezier"
30%
recall improvement vs generic generators
Audit Trail · ES256 JWT
Signed certificates for every generation.
Every password can be certified with an ES256-signed JWT containing generation parameters, entropy score, compliance badges, and SHA-256 fingerprint. Send it to your auditor.
{ "alg": "ES256", "ent": 128, "frame": "HIPAA", "fp": "a3f8…" }
ES256
JWT signature standard
DNA Score · 7-point audit
Quality graded A+ to C.
Length, character diversity, entropy, repeat detection, dictionary resistance — per-check breakdown.
Length ≥ 16
Mixed case
Symbols
No repeats
No dict
A+
maximum DNA score
Speed · No round-trips
Under one second, every time.
No API latency. No network calls. Generation is instant because everything runs locally.
RNG → local
server → 0ms
total → ~220ms
<1s
average generation time
Compliance dashboard
Every certificate. Every score. One view.
Get started
Your next password is three seconds away.
Free forever. No account. No tracking. No data stored. Cryptographically sound passwords, built for audits.
Zero server storage
NIST SP 800-63B
FIPS 140-3 RNG
No account required
Open audit mode