Question 1

Are the generated passwords secure? Will they be uploaded?

Accepted Answer

Passwords are generated entirely locally in your browser using Web Crypto's crypto.getRandomValues cryptographic secure random source, without any server involvement, and are never uploaded or recorded. Once the page is closed, they cannot be recovered, so please save them promptly and securely.

Question 2

How is password strength estimated?

Accepted Answer

We use Shannon entropy for estimation: entropy ≈ length × log₂(character set size), measured in bits. Generally, 60 bits or more is considered strong, and 80 bits or more is very strong. Increasing length or enabling more character types can enhance strength, often more effectively than just adding symbols.

Question 3

Why is it recommended to exclude ambiguous characters?

Accepted Answer

Characters like O and 0, l and 1, B and 8 can be hard to distinguish in some fonts, leading to errors when manually copying or dictating. If the password is mainly for auto-fill, exclusion may not be necessary; but for manual entry, enabling this is safer.

Password Generator

Frequently Asked Questions