Simple and secure random password generator

#1

Post by kabalweg » Fri, Sep 19, 2014, 1:49 AM UTC

Simple and secure random password generator
randompasswordgenerator.info

Re: Simple and secure random password generator

#2

Post by tonteldoos » Fri, Sep 19, 2014, 2:00 AM UTC

If we can't view the source (or at least the algorithms and libraries used), its security is only hearsay.

Re: Simple and secure random password generator

#3

Post by kabalweg » Fri, Sep 19, 2014, 2:03 AM UTC

tonteldoos wrote: post #2

If we can't view the source (or at least the algorithms and libraries used), its security is only hearsay.

Actually, you can via view source in browser. The passwords are generated via javascript in the browser.

Re: Simple and secure random password generator

#4

Post by jamessantiago » Fri, Sep 19, 2014, 6:31 AM UTC

The generator: https://www.randompasswordgenerator.info/js/custom.min.js

Is Math.random() a secure rng? http://stackoverflow.com/questions/5651789/is-math-random-cr...

I wouldn't consider this password generator to be secure due to the use of a non-crypto grade rng, but it's certainly looks useful for quickly generating a password.

Re: Simple and secure random password generator

#5

Post by kabalweg » Sat, Sep 20, 2014, 2:39 AM UTC

jamessantiago wrote: post #4

The generator: https://www.randompasswordgenerator.info/js/custom.min.js Is Math.random() a secure rng? http://stackoverflow.com/questions/5651789/is-math-random-cr... I wouldn't consider this password generator to be secure due to the use of a non-crypto grade rng, but it's certainly looks useful for quickly generating a password.

Thanks for the feedback. I have since updated the generator to use window.crypto.getRandomValues when available (older browsers does not support it) and then use Mersenne twister as a fallback. I hope it gets your recommendation :).