Member Avatar for Fahad_10

Hi, I have one simple question; has anyone used a password generator? I found couple but are they secure - Any Ideas - they claim they are

Edited by happygeek because: spammy link removed
  • 4 Contributors
  • 6 Replies
  • 568 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by pdsubbu

Dani AI

Generated

raised the right question. Replies here show the range of opinions: is rightly wary, points out that managers often generate and store passwords, and shared a typical generated example. The bottom line is: online password generators can be safe — but only when you can verify what they do. The important checks are who controls the code, whether generation happens entirely in your browser, and whether any results are ever sent or saved to a server.

Quick, practical checks you can do right now:

  • Open DevTools and confirm the page uses a cryptographic RNG (not Math.random). In the Console:

    if (window.crypto && window.crypto.getRandomValues) {
  console.log("Secure RNG available");
} else {
  console.log("No secure RNG - don't trust Math.random()");
}

  • Watch the Network tab while generating: no requests should leave your browser carrying the generated password.

  • Prefer open-source generators you can inspect, or use a local tool. Example local command:

    openssl rand -base64 24

Safe workflow (low effort, low risk): generate locally or with an audited client-side tool, copy once, immediately save into a trusted password manager (pick one with end-to-end/zero-knowledge encryption), enable multifactor authentication, then clear the clipboard and close the generator tab. Avoid generators that offer to email or store results, and avoid pasting generated secrets into webforms on public machines.

Threats to remember: malicious sites, man-in-the-middle if HTTPS is absent, and local keyloggers/clipboards. If you follow the checks above and use length (long random strings) rather than predictable patterns, you’ll get strong, usable passwords without exposing yourself to unnecessary risk.

Recommended Answers

All 6 Replies

Member Avatar for rproffitt

Can't see why I would use such a thing. To get up to speed read http://preshing.com/20110811/xkcd-password-generator/

Of course Correct Horse Battery Staple is no longer safe.

Given you can do this on your own, why would you or I bother with such a site?
That is, unless you are just spamming this, ringtone sites and not here to discuss it.

Member Avatar for Dani

Therre are some really popular Password Managers on the market these days. A lot of people choose to use them to manage all of their passwords in one place. One of the features is that they generate on your behalf some really cryptic paswords that aren't realistically typed in manually. In fact, you don't even need to know what they are. They store your passwords securely in the cloud so that they are accessible regardless of what computer / browser you're using. The idea is that you're more protected when every site you visit has a different super strong password (the kind that aren't realistically typed in and most certainly aren't memorizable), and it's all done behind the scenes. Nothing to memorize. Of course the big security concern is that all of your passwords are stored in the cloud hosted by this one service. They're meant to be stored securely, but should that service successfully get hacked, well, then ... All that being said, I know a LOT of people who swear by them. I don't use them myself.

Member Avatar for Dani

Oh, and as a follow up, LastPass (which is the most popular one that I know of) actually automatically changes your passwords for you on sites that have gotten hacked.

Member Avatar for Fahad_10

yup have you tried this one password generator, because it says the same thing. but my question is are they secure

Edited by happygeek because: same spammy link removed as before - not required to get information
Member Avatar for rproffitt

, I'm going with NOT SECURE since you can't verify what that site is doing with the information.

Member Avatar for pdsubbu

I always use "Strong Random password generator" for my official work and the passwords looks similar to below 16 digit password

JGpP?xu-5K6$mntu

I feel the one I use regularly is secured!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.