Password Generator
Generate cryptographically secure passwords locally in your browser. Configurable for legacy system constraints.
Why Use a Generator?
Humans are notoriously bad at creating random sequences. We rely on keyboard walks (qwerty), personal information (birthdates), or common substitutions (P@ssw0rd). These are vulnerable to dictionary attacks and credential stuffing.
The Web Crypto API
This tool uses window.crypto.getRandomValues(). Unlike Math.random(), this API provides cryptographically strong random values seeded from the OS entropy pool.
Common Mistakes
- Insufficient Length: Generating a complex but short password (e.g. 8 chars) provides false security. Length is mathematically more important than complexity.
- Saving to Text Files: Never copy/paste the output into a plain text document. Always copy directly into a secure Password Manager.
FAQ
Q: Why does it exclude ambiguous characters?
A: Some legacy systems require manual transcription. Eliminating '1', 'l', 'I', 'O', and '0' prevents transcription errors.