Secure Password Generator

Create cryptographically secure passwords with real-time strength analysis using the zxcvbn algorithm.

Access: /tools/developers/password-generator

---

Overview

The Password Generator creates random, secure passwords using the Web Crypto API and provides detailed strength analysis via zxcvbn. This is a 100% client-side tool - no AI, no network requests.

Key features:

• 4 generation modes - Random, memorable, PIN, passphrase
• zxcvbn analysis - Pattern detection and crack time estimates
• WiFi QR codes - Generate QR codes for WiFi password sharing
• Customizable - Length, character sets, exclusions
• One-click copy - Instant clipboard access
• No storage - Nothing saved or transmitted

---

Generation Modes

1. Random Password (Default)

Cryptographically random characters from selected character sets.

Example: K7$mP2xN@qL9vF4h

Best for:

• Website accounts
• API keys
• Database passwords
• Encryption keys

2. Memorable Password

Combines random words with numbers and symbols for easier recall.

Example: Correct-Horse-Battery-42!

Best for:

• Master passwords
• Passwords you need to remember
• Shared credentials (temporary)

3. PIN Code

Numeric-only codes of specified length.

Example: 847293

Best for:

• Banking PINs
• Device unlock codes
• Two-factor backup codes

4. Passphrase

Multiple random words separated by chosen delimiter.

Example: umbrella quantum bicycle fortress

Best for:

• Master passwords
• Encryption passphrases
• High-security accounts
• Password manager vaults

---

Character Set Options

Available Sets

Exclusion Options

---

Length Recommendations

---

Strength Analysis (zxcvbn)

Scoring System

Analysis Includes

Pattern Detection:

• Dictionary words
• Common passwords
• Keyboard patterns (qwerty, 123456)
• Repeated characters
• Sequences (abc, 321)
• Personal info patterns (dates, names)

Crack Time Estimates:

• Online attack (throttled)
• Online attack (unthrottled)
• Offline slow hash (bcrypt)
• Offline fast hash (MD5)

Entropy Calculation:

• Bits of entropy
• Character space size
• Effective length

---

Example Output

Generated Password

K7$mP2xN@qL9vF4h

Strength Analysis

Score:       4/4 (Very Strong)
Entropy:     98.2 bits
Crack Time:  centuries (offline fast hash)
Patterns:    None detected

Character Analysis:
- Uppercase: 6 (37.5%)
- Lowercase: 4 (25%)
- Numbers:   4 (25%)
- Symbols:   2 (12.5%)

Warnings:    None
Suggestions: None - this password is strong

---

WiFi QR Code Feature

Generate QR codes to share WiFi passwords without typing.

How to Use

1. Enter WiFi network name (SSID)
2. Enter password
3. Select security type (WPA/WPA2/WPA3)
4. Generate QR code
5. Scan with phone to connect

QR Code Format

WIFI:T:WPA;S:NetworkName;P:YourPassword;;

Security Types

Example QR Output

Generates a scannable QR code that:

• Works on iOS (Camera app)
• Works on Android (Camera or WiFi settings)
• Auto-connects to network
• No password typing required

---

How to Use

Basic Password Generation

1. Select mode - Random, memorable, PIN, passphrase
2. Set length - Drag slider or enter number
3. Choose characters - Enable/disable character sets
4. Click Generate - New password appears
5. Check strength - Review analysis
6. Copy - One-click copy to clipboard

WiFi QR Code

1. Switch to WiFi tab
2. Enter SSID - Your network name
3. Enter password - WiFi password
4. Select security - WPA2, WPA3, etc.
5. Generate QR - Scannable code appears
6. Download/Print - Save for guests

---

Technical Details

Cryptographic Security

// Uses cryptographically secure random
const array = new Uint32Array(length);
window.crypto.getRandomValues(array);

This provides:

• True randomness (not pseudo-random)
• Suitable for cryptographic use
• OS-level entropy source
• Unpredictable values

---

Password Policy Compliance

---

Best Practices

For Personal Use

• Minimum 16 characters
• Include all character types
• Use unique password per site
• Store in password manager
• Enable 2FA where possible

For Systems/Servers

• Minimum 24 characters
• Random mode only
• No dictionary words
• Rotate per security policy
• Store in secrets manager

For WiFi

• Minimum 12 characters
• Mix character types
• Change periodically
• Use WPA3 if supported
• Don't reuse other passwords

---

Use Cases

Account Setup

Generate strong passwords for new accounts.

Password Rotation

Create new passwords for scheduled updates.

API Keys & Tokens

Generate secure API tokens and secrets:

32-char random: wX9$kL2mN7pQ4rS1tU6vY0zA3bC5dE8f

Encryption Passphrases

Create strong encryption keys:

Passphrase: umbrella quantum bicycle fortress mountain

WiFi Guest Access

Generate and share WiFi via QR:

1. Create strong WiFi password
2. Generate QR code
3. Print/display for guests
4. No password disclosure

Development/Testing

Generate test credentials:

• Database passwords
• Service account keys
• Test user passwords

---

Security Notes

1. Client-Side Only - Passwords never leave your browser
2. No Storage - Nothing saved or logged
3. Crypto Random - Uses secure random generator
4. No Network - Works completely offline
5. Open Algorithm - zxcvbn is open-source and auditable

What This Tool Doesn't Do

• Store passwords
• Send data to servers
• Track generated passwords
• Remember your choices
• Access your clipboard history

---

Limitations

• Not a password manager - Use dedicated software for storage
• No sync - Passwords not saved across devices
• Browser-dependent - Requires modern browser with Web Crypto API
• zxcvbn patterns - May not detect all weak patterns

---

Privacy & Security

• 100% client-side - No data transmitted
• No storage - Nothing persisted
• No tracking - Usage not logged
• No cookies - No persistent data
• Works offline - Full functionality without internet

Your generated passwords are never seen by anyone but you.