I m building PassRule, a browser-side password generator that lets you fully customize password rules to match any website s weird restrictions. All generation runs locally without data upload. It will launch on Product Hunt soon, welcome to leave feedback and feature requests!
How do you actually confirm the generated passwords stay fully on-device and aren't being silently exfiltrated, especially with browser extensions or trackers running in the background?
@nebahat394361
Great question! Here’s how PassRule keeps your passwords fully local and secure:
All password generation logic runs purely on the client side with the browser’s native Web Crypto API. No password data is sent to any backend server at any point, so nothing leaks to external networks.
Generated passwords only exist temporarily in the current page’s memory. They are never saved to cookies, localStorage or any persistent storage automatically. Once you close or refresh the tab, the raw password is discarded immediately.
The option to ban specific characters is such a thoughtful touch for dealing with those annoying site policies that reject anything resembling a special character. Love that everything runs locally too.
@balkabakib78558 Thank you so much for your kind feedback! I built the banned character feature exactly to solve the messy, inconsistent password rules from different websites. Running everything client-side is core to protecting user privacy, and I’ll keep polishing this tool in the future.