Generate a strong password or passphrase, then check it against known breaches — your full password is never transmitted.
PassForge is a free password generator and breach checker that runs entirely in your browser using cryptographically secure randomness — the kind suitable for real account security, not Math.random(). Switch between a random character password and a memorable passphrase, then optionally check any password against the Have I Been Pwned database using k-anonymity, so only a partial hash is ever sent and your actual password never leaves your device.
Uses the Have I Been Pwned k-anonymity API — only the first 5 characters of the password's SHA-1 hash are sent, never the password itself.