Yours, from the start.

On your device

The browser generates passwords locally with Web Crypto. The app does not send them to a server or save a history. Site rules are interpreted locally using a limited grammar; unfamiliar requirements are rejected. On anew.pw, locally authored code sends a sanitised page category and fixed usage events to Umami Cloud: mode changes, successful or failed copies, generation failures, options opening, and rule acceptance or rejection. Generated values, clipboard contents, rules, templates, URL queries and fragments, and referrer URLs are excluded. No external analytics script runs on this page. Our analytics code writes no cookies, identifiers or browser storage and honours Do Not Track and Global Privacy Control. Umami and hosting infrastructure receive network metadata, including IP addresses and browser headers, under their own policies. Analytics failures do not block generation or copying.

Remote generation

The optional /now and MCP interfaces generate on the server and return the result to the caller. These passwords can appear in the caller’s tool history. Application code does not log or persist them, and responses request no caching. Hosting and client infrastructure have their own policies.

Copies and privacy

Copy places the value on your clipboard, which other software may read or sync. Browser extensions and software on your device may read page contents. Save passwords you use in your password manager.

Randomness

Characters use unbiased rejection sampling and require all selected groups. Memorable passwords select six to eight independent words from the complete 7,776-word EFF list. No account security or quantum-proof claim is made. Generating a password does not install it on a service.

Accessibility

The generated value has a label and can be inspected deliberately. Status announcements do not read the password aloud. Controls work with the keyboard; motion respects reduced-motion settings. Real screen-reader and device checks remain part of launch review.

Credits

The EFF Long Wordlist is used under CC BY 3.0 US. Words are unchanged; dice labels were removed. EFF does not endorse New Password.

Atkinson Hyperlegible Next is used under the SIL Open Font License.

To limit remote API traffic, we store one aggregate minute counter. It contains no passwords, IP addresses, identifiers or request URLs. Hosting infrastructure still processes network requests.