Generator Kata Sandi

Password strength is determined by two factors: length and entropy (randomness). Entropy is measured in bits -- each bit doubles the number of possible combinations. A 12-character password using uppercase, lowercase, numbers, and symbols has about 78 bits of entropy, which translates to roughly 10^23 possible combinations. Modern GPUs can test billions of passwords per second, so a 78-bit password would take thousands of years to crack. However, many websites enforce complexity rules (requiring special characters) without requiring sufficient length, leading users to create short but complex passwords that are actually weaker than long, simple ones.

The formula for entropy is: bits = log2(charset_size) * length. For example, a 16-character password using all 94 printable ASCII characters has log2(94) * 16 鈮?105 bits of entropy. This is considered uncrackable by any current or foreseeable technology. Our generator uses the Web Crypto API's crypto.getRandomValues() function, which draws entropy from your operating system's secure random source -- the same source used for TLS key generation and disk encryption. This is fundamentally different from Math.random(), which uses a pseudo-random number generator (PRNG) that can be predicted if the seed is known.

Length matters far more than complexity. Adding one character to a password adds more entropy than replacing a letter with a symbol. A 20-character password using only lowercase letters (log2(26) * 20 鈮?94 bits) is stronger than a 12-character password using all character types (log2(94) * 12 鈮?79 bits). This is why NIST guidelines (SP 800-63B) now recommend longer passwords over complex ones, and many services have dropped complexity requirements in favor of length minimums.

Gunakan kata sandi unik untuk setiap akun. Penggunaan ulang kata sandi adalah risiko keamanan terbesar -- jika satu layanan diretas, penyerang dapat mencoba kata sandi yang sama di layanan lain. Pengelola kata sandi membuat ini mudah: Anda hanya perlu mengingat satu kata sandi utama, dan pengelola menghasilkan dan menyimpan kata sandi unik untuk setiap akun.

Untuk kata sandi utama pengelola kata sandi Anda, pertimbangkan untuk menggunakan frasa sandi -- urutan kata acak seperti 'kuda-robot-ungu-musim'. Frasa sandi lebih mudah diingat daripada kata sandi acak dengan kekuatan entropi yang setara, karena otak manusia lebih baik mengingat kata-kata bermakna daripada urutan karakter acak. Praktik terbaik: gunakan 4-5 kata acak yang tidak terkait.

Enable two-factor authentication (2FA) wherever possible. Even the strongest password can be compromised by phishing, keyloggers, or data breaches. 2FA adds a second layer of defense -- typically a code from an authenticator app (Google Authenticator, Authy) or a hardware key (YubiKey). SMS-based 2FA is better than nothing but is vulnerable to SIM-swapping attacks. Prefer TOTP (time-based one-time passwords) or hardware keys for maximum security.