How does the Password Generator work?
The KitLumi Password Generator draws bytes from crypto.getRandomValues and uses rejection sampling to avoid modulo bias. Each selected character set appears at least once before the generated characters are securely shuffled.
How do you generate a strong password?
- Set a length of at least 16 characters when the destination allows it.
- Select the accepted character sets and exclude ambiguous characters only when manual entry matters.
- Generate, copy one value, and store it directly in a trusted password manager.
What changes password strength?
| Choice | Effect | Recommendation |
|---|---|---|
| More length | Raises the search space quickly | Prefer length over complicated manual patterns |
| Larger character pool | Adds entropy per character | Use every set accepted by the service |
| Reusing a password | Links account risk after one breach | Generate a unique value for every account |
What does the entropy number leave out?
The displayed number estimates random-generation strength only. It does not account for storage practices, phishing, malware, password-reset weakness, service-side hashing, or reuse. Multi-factor authentication and a password manager remain separate controls.
Frequently asked questions about Password Generator
Are passwords generated on the server?
No. Passwords are generated inside the browser with crypto.getRandomValues and are not sent to KitLumi.
How long should a generated password be?
Use at least 16 random characters for ordinary account passwords when the service permits it. Longer values are appropriate for high-value credentials and machine secrets.
What does estimated entropy mean?
The estimate is length multiplied by log2 of the selected character-pool size. It assumes each generated character is independent and uniformly selected.
Why exclude ambiguous characters?
Excluding characters such as O, 0, I, l, quotes, and slashes makes manual transcription easier. It slightly reduces the character pool, so retain a sufficient length.
What changed?
Added Web Crypto generation, character-set controls, ambiguity filtering, required set coverage, entropy estimates, bulk copy, and download.