How it works
Random words, made local and readable.
Desi Pass Gen creates passphrases by choosing random Hinglish words in your browser. The safety comes from the randomness and the number of possible combinations; the Hinglish part makes the result easier for the right user to read, type, and remember.
1. Choose
Pick a word count
Six words plus a number is the default. Use seven or eight words for high-value secrets you may need to remember.
2. Generate
Everything stays local
The wordlist and generator code run inside your browser. Clicking Generate does not send the passphrase to a server.
3. Store
Use it once
Save it somewhere trusted. A strong passphrase should still be unique; never reuse the same one across sites.
Passphrase, not password soup
A normal generated password can be very strong, but it is often unpleasant to remember or type. A passphrase uses several random words instead. If the words are picked randomly from a large enough list, a longer phrase can be both human-readable and difficult to guess.
This idea is commonly associated with Diceware-style passphrases. The EFF's Dice-Generated Passphrases guide recommends using random word selection and a unique passphrase for each purpose:EFF Dice-Generated Passphrases.
Why Hinglish?
Security does not come from the words being obscure. It comes from the words being chosen randomly. Hinglish makes the phrase feel more natural for users who already think, text, and speak in this mix. Words likechai,baarish, andyaarare not secret; they are familiar. That is the point.
The entropy math
The current wordlist has exactly 800 words. Each random word addslog2(800), or about 9.64 bits of entropy. The default setting uses 6 words and adds one random number from 0 to 99.
Entropy is not a promise that something takes a specific number of years to crack. It is a way to compare how many guesses a random generator makes possible under the current settings.
Where randomness comes from
Desi Pass Gen usescrypto.getRandomValues(), the browser's cryptographically secure random number generator for passwords, keys, and other sensitive values.
Word selection uses rejection sampling so every word has the same chance of being picked. Repeated words are allowed because each pick is independent.
Privacy model
The generator logic and wordlist are bundled into the page. After the page loads, clicking Generate runs locally. The generated passphrase is not sent to a backend and is not saved by the site.
One honest detail: the site may save your theme choice in local storage so dark mode stays dark. That is separate from the passphrase, which is not stored.
Practical security advice
Modern password guidance is less about forcing symbols and more about long, unique secrets, password managers, and multi-factor protection. NIST recommends allowing paste and supporting password managers, while OWASP recommends unique strong passwords and multi-factor authentication for stronger account protection.
