Security & Compliance
StoryPass uses cryptographically secure random number generation and aligns with NIST guidelines for password security.
CSPRNG Verified
Uses Node.js crypto.randomInt() for unbiased random selection
No Storage
Passwords generated client-side, never transmitted or stored
36.91 Bits Entropy
Working toward 64-bit NIST compliance via corpus expansion
No Bias
All scoring/weighting removed; uniform distribution verified
Current Status
How Password Generation Works
Count Query
Get total count of available items (with filters applied)
Random Index
Generate crypto.randomInt(0, count) for unbiased selection
Fetch Item
Use database OFFSET to select item at random index
Assemble Locally
Password is combined in your browser - we never see it
Why Trust StoryPass?
Zero Knowledge
We literally cannot see your passwords. They're assembled in your browser.
Bank-Grade RNG
Same cryptographic randomness used by financial institutions.
Open Methodology
Our security practices are documented and auditable.
Measured Entropy
We show you exactly how much randomness is in your password.