Frequently Asked Questions
- How does KeyMint generate passwords?
-
KeyMint utilizes the native Web Crypto API (
crypto.getRandomValues) built into your browser. This is an unbiased cryptographically secure pseudorandom number generator (CSPRNG) seeded directly by your operating system.
- Are my passwords ever sent to a server?
-
Never. Password creation occurs strictly inside your device's browser memory. No generated passwords, seeds, or analytics are ever logged, cached, or transmitted over the network.
- What makes a password strong?
-
Length is the primary defense against modern offline brute-force attacks. Security standards recommend choosing at least 16 characters and including a combination of uppercase letters, lowercase letters, numbers, and symbols.
- What does "Exclude Ambiguous" do?
-
It filters out characters that are easy to confuse visually in common fonts—specifically
0, O, 1, l, I, and |. This makes manual transcription on phones or consoles significantly less error-prone.
- Can I use KeyMint while offline?
-
Yes. KeyMint is registered as a Progressive Web App (PWA). Once loaded, its Service Worker caches the necessary assets so you can safely generate passwords without an internet connection.
- Does KeyMint save any data?
-
Only your generator preferences (length and active toggle settings) are saved to your browser's local storage so they persist across visits. Generated passwords are never saved.