Why PassAfer keeps compute in the browser
If generation, audit, and file crypto run on a server, the plaintext window grows. Local Web Crypto lets you confirm in DevTools that sensitive data isn’t sent.
Blog
Short notes on local encryption, password strength, and privacy — fewer slogans, more details you can verify.
Burn-Link: why the key lives in the URL hash
Fragments are not sent to the server. The backend only sees ciphertext; recipients decrypt locally from the full link, then the secret burns.
How Password Audit decides “weak”
Entropy estimates, character classes, and a local check against public breach top lists — the password under test never leaves your browser.