Secure Password Generator 安全随机密码生成器

16

Character Types 字符类型 


          

            
            
            
          

        


        
        

          

            
What Makes a Password Strong?

            
Password strength is measured in entropy: bits = length × log₂(charset_size). With this tool's defaults (16 characters, 95-char set of uppercase + lowercase + digits + symbols), entropy is ~105 bits — considered unbreakable with current technology. Even at 10¹² guesses/second, exhausting all possibilities would take longer than the age of the universe. This tool uses crypto.getRandomValues() (a CSPRNG) and guarantees at least one character from each selected set via Fisher-Yates shuffle — no bias, no predictability.


            
Security Notes

            
All generation runs entirely in your browser — passwords never reach any server. We recommend storing the results in a trusted password manager such as Bitwarden (open source), 1Password, or KeePass. Per NIST SP 800-63B, length matters far more than forced symbol complexity, which is why a 20-character random phrase or password beats a short "complex" one every time.

          


          

            
强密码的标准是什么？

            
密码强度用熵值衡量：熵 = 长度 × log₂(字符集大小)。使用本工具默认设置（16 字符，大小写+数字+符号共 95 字符集），熵值约 105 位——以当前技术几乎无法破解。即使每秒尝试 10¹² 次，穷举所有可能性也需要比宇宙年龄更长的时间。本工具使用密码学安全伪随机数生成器（CSPRNG）crypto.getRandomValues()，并通过 Fisher-Yates 洗牌保证每个选中字符集至少出现一次，无偏差、无可预测性。


            
安全使用建议

            
所有生成过程完全在浏览器本地运行，密码不会发送到任何服务器。建议将生成的密码存入可信密码管理器，如 Bitwarden（开源）、1Password 或 KeePass。根据 NIST SP 800-63B 标准，密码长度比强制符号复杂度重要得多——一个 20 字符随机密码远胜一个短而"复杂"的密码。