Please review my password generator website

[stygg2003]

Anyone considering using any 3rd party to generate a password should think very hard about this.

This may be a genuine service, but I would never ever use a service such as this.

https://security.stackexchange.com/q...sswords-online

On a very basic level I don't see how this is any different to a spam post.

Good points Paul

Stygg

[handrawn]

The password must contain letters, numbers, and other special symbols

sorry this is way out of date

see for example here: https://www.bbc.co.uk/news/technology-40875534

as far as a computer is concerned a character is a character is character, they are all the same and it makes no difference at all to a hacking program [a jumble of so-called special characters might make it less easy for someone looking over your shoulder, but you are not going to let that happen are you?]

as is sadly the case a lot of industry lags behind on this still

you need long passwords that are easy to remember and at the very least 24 characters; twelve is too short, what you need are as high a number of permutions as possible

foraging ducks lit by moonlight glide between reeds under the sargasso sea

and as the referrenced article states - a reputable password manager is what you should be aiming for

[pauland]

The point is more about whether or not people should trust any password of any kind handed to them by a website they know nothing about.

Do you trust the password to be difficult to crack? Do you trust the website not to be handing out the same password to multiple people? Do you trust the website not to be passing the password to third parties? Do you trust the website not to be harvesting what it can about you and squirreling that away with your free password?

On a secondary level should we be following links to unknown websites in the first place and assuming they are working in our best interest?

The link to the site may be bona-fide, but I can't tell and I doubt anyone else can. It seems to be operating from Russia with the poster residing in the Ukraine.

[haakoo]

If one wants an easy to remember password,one should use a sentence.
Besides there are password manager apps that are offline and provided with a built-in generator.

[handrawn]

The point is more about whether or not people should trust any password of any kind handed to them by a website they know nothing about.

I think that should be a given Paul... to anyone who understands security, anyway...

If one wants an easy to remember password,one should use a sentence

sure thing Hans, hence the 'foraging ducks' example, a line from a book..