Password Generator可以处理什么？
Password Generator 用于在浏览器中生成结果，并清楚显示处理结果和限制。 已核对的功能： Web Crypto random source, 8 to 128 characters, Required set coverage, Entropy estimate.
Prefer length and uniqueness
Use a unique random password of at least 16 characters when supported. Store it in a password manager and enable multi-factor authentication as a separate control.
如何使用？
- Choose a length of at least 16 characters when allowed.
- Select accepted character sets and exclude ambiguous characters only when manual entry matters.
- Generate and store the unique value directly in a trusted password manager.
实际输入输出示例
Generate a 20-character value
输入
Length 20; uppercase, lowercase, digits, symbols输出
One unique random password plus its estimated entropyThe exact output changes every run because bytes come from the browser cryptographic random source.
常见错误与修复方法
| 现象 | 可能原因 | 修复方法 |
|---|---|---|
| The service rejects the password. | Its length or allowed-character policy differs from the selected settings. | Match the destination policy while keeping as much length and character variety as possible. |
| Generated values repeat after manual edits. | A copied password was reused or modified outside the generator. | Generate and store a separate value for every account. |
Entropy is only one security control
该工具的实际边界： The estimate assumes independent uniformly selected characters. It does not account for password reuse, phishing, malware, reset weakness, storage, or service-side hashing.
标准与实现参考
- MDN — Crypto.getRandomValues() (opens in a new tab)Documents the cryptographic random source.
- NIST SP 800-63B (opens in a new tab)Documents current authenticator and password guidance.
关于Password Generator的常见问题
Are passwords generated on a server?
No. crypto.getRandomValues runs in the browser and generated values are not sent to KitLumi.
How long should a password be?
Use at least 16 random characters for ordinary accounts when the service permits it.
What does entropy estimate?
It estimates the random search space and does not measure storage, phishing, malware, reset, or reuse risk.
更新记录
本次实质更新： Password Generator: Added Web Crypto generation, character-set controls, ambiguity filtering, required-set coverage, entropy estimates, bulk copy, and download.