Random password generator

A common recommendation is to use open source security tools where possible, since they allow independent checks on the quality of the methods used.

Such policies typically reduce strength slightly below the formula that follows, because symbols are no longer independently produced.

If each symbol in the password is produced independently and with uniform probability, the entropy in bits is given by the formula

[citation needed] A large number of password generator programs and websites are available on the Internet.

Furthermore, and probably most importantly, transmitting candidate passwords over the Internet raises obvious security concerns, particularly if the connection to the password generation site's program is not properly secured or if the site is compromised in some way.

A possible solution to this issue is to generate the password using a client-side programming language such as JavaScript.

The advantage of this approach is that the generated password stays in the client computer and is not transmitted to or from an external server.

Here is the simple Javascript code that generate the strong password using web crypto API.

[4][5] Many computer systems already have an application (typically named "apg") to implement the password generator standard FIPS 181.