Password Generator

Kitengenezaji cha Nenosiri Imara

Tengeneza manenosiri salama kiakiolojia kwenye kivinjari chako. Badilisha urefu, aina za herufi na usomekaji. Hakuna kitu kinachotumwa kwa seva.

Ndio. Tunatumia crypto.getRandomValues — kitengenezaji cha nambari za nasibu salama kiakiolojia (CSPRNG) cha Web Crypto API. Inafaa kwa manenosiri, token na funguo za kiakiolojia.

Hapana. Utengenezaji wa nenosiri hutokea kabisa kwenye kivinjari chako kupitia JavaScript. Hakuna ombi la mtandao linalofanywa wakati wa kutengeneza nenosiri. Unaweza kuthibitisha kwa kufungua Network tab ya kivinjari.

—

Kidokezo: bonyeza Space au R kutengeneza tena.

16
416324864
Hali
Aina za herufi

Kwa nini Password Generator?

Salama kiakiolojia, inayoweza kubadilishwa, na kabisa upande wa mteja.

Salama kiakiolojia

Hutumia crypto.getRandomValues ya kivinjari — API ile ile inayotumiwa na benki na wakusanyaji wa manenosiri. Hakuna Math.random ya nasibu ya uwongo.

Inayoweza kubadilishwa

Urefu wa 4–64, makundi manne ya herufi (kubwa, ndogo, nambari, alama) na hali tatu: herufi zote, rahisi kusoma, inatamkika.

Faragha kwa muundo

Manenosiri hutengenezwa kabisa katika kivinjari chako. Hakuna kinachotumwa kwa seva yoyote, kamwe. Hakuna kumbukumbu, hakuna telemetri.

Lugha 25

Inapatikana katika lugha 25 na ugunduzi wa kivinjari otomatiki. Msaada wa RTL kwa Kiarabu, Kiajemi na Kiurdu.

Uzalishaji wa wingi

Unahitaji manenosiri ya timu au API key mpya? Tengeneza hadi 10 kwa mara moja, nakili zote au pakua kama faili la.txt.

Kipimo cha nguvu

Kadiria ya nguvu inayotegemea entropy kwa wakati halisi. Ona jinsi nenosiri lako lilivyo imara kabla ya kulinakili.

How the password generator works

Cryptographic-grade randomness from your browser's hardware RNG.

  1. 1

    Choose length and character classes

    Pick the password length (we recommend 16+ for new accounts, 24+ for high-value services) and which character classes to include: lowercase, uppercase, digits, symbols. You can also enable an easy-to-read mode that excludes ambiguous characters like 0/O and 1/l/I, or a pronounceable mode for passphrases you can speak.

  2. 2

    Browser CSPRNG produces the bytes

    We call crypto.getRandomValues, the browser's built-in cryptographically-secure random number generator. On modern hardware this draws from the CPU's hardware entropy source (RDRAND on x86, ARM TRNG on Apple Silicon). The output is the same quality as /dev/urandom on Linux.

  3. 3

    Bytes mapped to your alphabet

    Random bytes are mapped to the chosen character set using rejection sampling — this avoids the modulo bias that naïve byte % alphabet.length would introduce. You get a uniform distribution across every character, every position.

  4. 4

    Strength meter and copy

    We compute the entropy (in bits) of the result and show it next to the password. Click to copy; the password lands on your clipboard via navigator.clipboard.writeText and is never sent anywhere over the network.

When to use which mode

Different security situations call for different password strategies.

New accounts on consumer services

16-character mixed-case + digits + symbols, stored in a password manager. That's ~95 bits of entropy — comfortable margin against any current cracking attack.

API keys and service tokens

32-character alphanumeric, copied straight into your .env file. The pattern most APIs accept; long enough that brute force is irrelevant.

Wi-Fi passwords (memorable)

Pronounceable mode produces things like karto-zelin-bauma — easy for a guest to type from a printed card, still 70+ bits of entropy.

Master passwords

Use the passphrase mode (4-6 random words) for things you have to type by hand without a manager — it's both stronger and easier to remember than a 12-character mixed-case password.

Why a generator's privacy matters

If a password generator's randomness comes from a server (or worse, is logged on its way back), every credential you produce is potentially compromised the moment it's created. iKit generates passwords using only your browser's hardware RNG — the bytes are never transmitted, never logged, never cached.

  • crypto.getRandomValues is hardware-backed and not deterministic.
  • Generated passwords never leave your browser; copy goes via the local clipboard.
  • No "saved passwords" history, no analytics on what you generated.

Miongozo inayohusiana

Mafunzo ya kina na ulinganishaji wa zana kutoka blogu ya iKit.

Maswali Yanayoulizwa Mara kwa Mara

Je, manenosiri haya ni ya nasibu kweli?

Ndio. Tunatumia crypto.getRandomValues — kitengenezaji cha nambari za nasibu salama kiakiolojia (CSPRNG) cha Web Crypto API. Inafaa kwa manenosiri, token na funguo za kiakiolojia.

Je, manenosiri yangu hutumwa mahali popote?

Hapana. Utengenezaji wa nenosiri hutokea kabisa kwenye kivinjari chako kupitia JavaScript. Hakuna ombi la mtandao linalofanywa wakati wa kutengeneza nenosiri. Unaweza kuthibitisha kwa kufungua Network tab ya kivinjari.

Kiwango cha nguvu kinamaanisha nini?

Kipimo hukadiria entropy (biti za nasibu): Dhaifu <28 biti, Wastani 28–40, Nzuri 40–60, Imara 60–80, Imara sana 80+. Nenosiri la herufi 16 lenye aina zote ni takriban biti 104 — Imara sana.

Je, nitumie manenosiri yanayoweza kutamkika?

Pekee ikiwa unahitaji kuzungumza au kukumbuka nenosiri. Manenosiri yanayotamkika hubadilishana entropy kwa urahisi wa kukumbuka — tumia urefu mkubwa (20+) kubaki salama. Katika hali nyingi, nasibu ni bora kwa sababu utahifadhi katika mkusanyaji wa manenosiri.

Urefu unaopendekezwa ni upi?

Herufi 16 zenye aina zote nne ni chaguo-msingi imara. Kwa akaunti za thamani kubwa (barua pepe, benki, sarafu-fiche) tumia 20+. Baadhi ya mifumo huweka kikomo cha 16 au 20 — kagua mahitaji ya tovuti kila mara.