03
PASSPHRASE
EFF wordlist mode
Six words = ~77 bits. Easy to type on mobile, strong against any modern attacker.
What it actually does
02
CONTROL
Length & character classes
12, 16, 24, 32, custom. Uppercase, lowercase, digits, symbols. Exclude lookalikes (0/O, 1/l/I) for printable copy.
04
EPHEMERAL
Memory-only
Not localStorage, not IndexedDB, not a server. Clipboard auto-clears at 30s.
How it works
- Open morph.cool/password in any modern browser. No account, no install, no card.
- Pick length (12/16/24/32 or custom) and character classes — uppercase, lowercase, digits, symbols, exclude lookalikes.
- Hit generate. crypto.getRandomValues() pulls bytes from the browser CSPRNG. Strength meter scores entropy in bits.
- One-click copy to clipboard. Optional 30-second auto-clear.
- Paste into your vault, signup form, or password-manager import. Nothing was uploaded, nothing was logged, nothing was stored.
105 bitsDefault entropy
0Bytes transmitted
30sClipboard auto-clear
Why the password-generator market is broken
Morph generates the password in your browser tab using the W3C-spec CSPRNG, displays it once, and forgets it the moment you close the page. No vault, no sync, no telemetry. If you also want a vault, run a vault. If you only wanted a strong password, this is the surface.
Where the vaults still win
If you need cross-device password sync, breach monitoring, autofill in your browser, and shared vaults for a team, run a password manager. Those are full vault products and Morph isn't trying to replace them. Morph is the strong-bytes-on-demand surface for the times you don't need a vault — a router admin password, a one-off WPA2 key for the AirBnB Wi-Fi, a temporary signup you'll delete next week. CSPRNG, in your tab, gone when you close it.
Frequently asked
How is this different from a password manager's generator?
Those are full password-manager subscriptions with vaults, sync, autofill, and breach monitoring. Morph is just the generator surface — crypto.getRandomValues() in your tab, displayed once, never stored. If you need a vault, run a vault. If you need bytes right now, run Morph.
Is the random source actually secure?
Yes. crypto.getRandomValues() is the W3C Web Cryptography API's CSPRNG — backed by /dev/urandom on Linux, BCryptGenRandom on Windows, SecRandomCopyBytes on macOS/iOS. The same source banks, password managers, and cryptographic libraries use. Math.random() is NOT cryptographically secure; Morph never falls back to it.
How long should my password be?
16 characters with the full 95-symbol alphabet gives ~105 bits of entropy — past current brute-force ceilings even with offline GPU clusters. 12 characters is the modern minimum (~78 bits). 24+ is paranoid-secure. Length matters more than complexity rules — "horse battery staple correct" is stronger than "P@ssw0rd!1" against any real attacker.
Can I generate a passphrase instead?
Yes. The passphrase mode picks N words from the EFF long wordlist (7,776 words = 12.9 bits per word). Six words gives ~77 bits of entropy — strong enough for any modern attack and easy to type on mobile. The wordlist is bundled with the page; no server lookup.
Does it work on iPhone or iPad?
Yes — Safari on iOS supports crypto.getRandomValues() fully. Generate, copy, paste into your password manager or signup form. The whole flow runs locally on your phone, never touches a server.
Is the password stored anywhere?
Nowhere. Not localStorage, not sessionStorage, not IndexedDB, not a server. The password lives in browser memory until you close the tab or hit regenerate. The clipboard auto-clears after 30 seconds. Morph cannot recover it for you because it never had it.
Nothing leaves your device · Free for what you make, credits for what we run