Roll: Password & passphrase generator

Roll makes strong passwords on your device, in one click from the toolbar. Copy one, or right-click a password field on any sign-up form and let Roll fill it, so your browser's own password manager offers to save it. Nothing secret ever leaves your browser: passwords are never saved to disk, never logged and never sent anywhere. ━━━━━━━━━━━━━━━━━━━━ WHAT YOU GET ━━━━━━━━━━━━━━━━━━━━ • Random passwords: 4 to 128 characters, capital letters, small letters, digits and symbols (your own symbol set if a site only allows some), avoid look-alikes like 0 O o 1 l I |, leave out characters, use every set at least once, no repeats or runs. • Passphrases from the EFF's long wordlist: 3 to 12 words, your choice of separator, capitals, an extra digit or symbol. • PINs: 4 to 12 digits, without easy ones like 1111 or 1234. • Patterns: write a template like Cvcc-9999-!! for sites with strict rules. • Pronounceable passwords that are easier to say and type. • An honest strength meter: bits of entropy from how the password was made, a label (Weak, Fair, Strong, Very strong) and the time to guess it. • Right-click "Generate password here": fills the password field and its "confirm password" field, with your last-used settings or any preset. Works with React, Vue and Angular forms. • Presets: Default (your last-used settings), Strong, Legacy site, Wi-Fi, Passphrase, PIN, and your own. • A spell-out view that reads a password character by character. • Keyboard and screen-reader friendly. ━━━━━━━━━━━━━━━━━━━━ HOW IT WORKS ━━━━━━━━━━━━━━━━━━━━ 1. Click the Roll die in the toolbar. A new password is ready. 2. Change the type or the options; Roll remembers them for next time. 3. Press Copy and paste it into the form, or right-click the password field and choose "Generate password here". 4. Submit the form: your browser offers to save the password in its own password manager. ━━━━━━━━━━━━━━━━━━━━ PRIVACY ━━━━━━━━━━━━━━━━━━━━ • Passwords are made with your browser's secure random number generator and are never saved to disk. Only the last one is kept in your browser's memory, so reopening Roll shows it again (marked as the same password) until you close the browser. No history, no vault, no server, no account. • Your settings and presets (never a password) are kept in your browser's sync storage. • The first time you open Roll it asks "Help improve Roll?". Only if you choose "Share anonymous stats" does it send anonymous usage counts (like "a password was copied", never the password, its length or the site) and crash reports with page addresses and anything that looks like a password removed. Like any server, Umami and Sentry see your IP address when Roll sends, but neither stores it, so we can't tell who you are. Change your answer any time in Settings. • Roll can't reach any other server: its content security policy only allows those two services and, for the optional breach check (off by default), Have I Been Pwned's Pwned Passwords, which gets only the first 5 characters of the password's SHA-1 hash. It loads no code from the internet. • No access to your tabs, history or all websites. Roll touches a page only when you right-click a field and choose to fill it. Full privacy policy: https://appbits.dev/apps/roll/privacy Roll: strong passwords, made on your device.