Password Generator

The password generator provides a way to create strong passwords directly on the device.

VeilVault is a security-first, offline-only password vault developed by CodeVeil.

The password generator is designed to be local, ephemeral, and non-invasive.

Purpose

The password generator exists to:

• Help users create strong passwords
• Reduce reliance on reused or weak credentials
• Avoid external password generation tools

It is a convenience feature, not a storage mechanism.

Generation Contexts

VeilVault provides password generation in different contexts.

In-Browser Password Generation

• Available directly in supported browsers
• Does not require unlocking the vault
• Generated passwords are ephemeral
• Nothing is stored unless the user explicitly saves it after authentication

This mode is designed for fast, low-friction password creation during account sign-up.

In-Vault Password Generation

• Available when creating or editing vault entries
• Requires the vault to be unlocked
• Generated passwords are part of the active vault session
• Saving remains an explicit user action

This mode is intended for managing stored credentials.

Ephemeral Behavior

Generated passwords are ephemeral by design.

• They are not saved automatically
• They are not stored in the vault unless the user explicitly chooses to save them
• They are not persisted outside the active session

Closing the generator clears generated values.

Interaction with Autofill

When used in supported browsers or apps:

• Generated passwords may be inserted into password fields
• Saving remains an explicit, authenticated action
• Generation does not bypass vault security

The generator does not auto-create vault entries.

What the Password Generator Does Not Do

The password generator does not:

• Store generated passwords automatically
• Sync generated values
• Transmit data off-device
• Analyze or score existing passwords

It is a standalone utility.

Limitations

The password generator does not assess:

• Whether a generated password is accepted by a specific service
• Service-specific password rules or policies

Users remain responsible for ensuring compatibility.

Summary

• Passwords are generated locally
• Generated values are ephemeral
• Nothing is stored without explicit user action
• No network or analytics are involved

The password generator exists to reduce risk, not to add complexity.

← Back to Docs