Erzeugen a cryptographically secure random password
Erstellen ein high-entropy Passwort mit ein cryptographically sicher random generator, mit control über Länge und Zeichen sets.
- 1
A secure password must be generated from a cryptographically secure random source (CSPRNG), not Math.random(). Length and character set determine entropy: 16+ mixed characters gives ~100 bits, strong against offline brute force.
- 2 Passwort-Generator →
Set length (16-32 recommended) and select character sets (lower, upper, digits, symbols). The tool uses the Web Crypto API CSPRNG.
- 3 Zufallsbytes-Generator →
For non-password random tokens (API keys, session IDs), use this tool to generate hex or Base64 random strings of a specified byte length.
- 4
Verify the output contains characters from every selected set. Avoid ambiguous characters (0/O, 1/l/I) if the password will be transcribed by hand — some generators offer an 'exclude ambiguous' option.
Häufige Fragen
- How long should my password be?
- For online services with rate limiting, 12-16 characters suffice. For offline attack scenarios (encrypted backups, local vaults), use 20+ characters. Each additional character multiplies brute-force cost by the alphabet size.
- Are passphrases better than random passwords?
- Random passphrases (4-6 words from a 7776-word list) achieve similar entropy to 16-char random passwords but are easier to type and remember. Use random passwords for machine/API contexts and passphrases for human-typed logins.