Privacy-first, client-side password generation for users who need strong credentials without exposing sensitive data to third-party services.
SecureKey is built for practical, daily password hygiene with a simple principle: generation and analysis should happen entirely in the browser.
- No backend dependency
- No telemetry
- No credential transmission
- Cryptographically secure password generation (
crypto.getRandomValues) - Real-time strength scoring and entropy estimation
- Crack-time approximation for rapid risk visibility
- Password history tracking (local-only)
- Favorites management (local-only)
- Bulk password generation and JSON export
- Turkish/English localization
- All data remains on-device in
localStorage - No server-side processing
- No external API calls for generation logic
- HTML5
- Vanilla JavaScript (ES6+)
- CSS3
- Font Awesome (CDN)
.
├─ index.html
├─ style.css
├─ script.js
├─ LICENSE
├─ README.md
├─ .gitignore
└─ aka-erx4nz/
└─ aka.jpg
- Clone this repository.
- Open
index.htmlin a modern browser.
No build pipeline is required.
- Host over HTTPS in production.
- Add a strict Content Security Policy (CSP).
- Periodically review dependencies and asset sources.
- Passphrase mode with curated wordlists
- Security policy presets
- Optional offline-first PWA support
- Unit tests for generator and scoring modules
Distributed under the MIT License. See LICENSE.