All products

Passwordify

Live

Privacy-first password tools, and an API for everything else.

Open Passwordify View source on GitHub

The problem

Password checks are either sloppy character-class rules or a service you have to trust with the password itself.

What it is

Passwordify gives people three free, entirely client-side tools for checking and generating passwords — no password ever leaves the browser — and gives developers a small, fast API for the same checks. Strength scoring, breach screening, policy validation and secure generation, all aligned with NIST 800-63B.

Reach for it when

Adding trustworthy password checks without sending passwords anywhere.

Built with

  • Astro
  • React
  • TypeScript
  • Azure Functions
  • Azure Static Web Apps

What it does

  • Real-time strength scoring with zxcvbn, not character-class rules
  • Breach check against Have I Been Pwned via k-anonymity — only a SHA-1 prefix leaves the device
  • CSPRNG password and passphrase generator with an EFF diceware wordlist
  • POST /v1/strength — score, guesses, entropy bits, and crack time
  • POST /v1/breach — k-anonymity breach lookup by password or hash prefix
  • POST /v1/validate — combined strength and breach against a policy, NIST 800-63B aligned
  • POST /v1/generate — server-side secure password and passphrase generation
  • Stateless JSON over HTTPS, bearer-key auth, structured error bodies

More screenshots