For security measures! Tools and tips for automatically generating strong and secure passwords
We will explain in detail the conditions for creating a ``secure and difficult-to-guess password'' to protect your online accounts from unauthorized access, hacker attack methods (dictionary attacks and brute force), current new security standards (does periodic change need to be done?), and how to use secure local automatic generation tools.
§1. I empathize with these concerns: I can't think of complex passwords & fear of reusing them
Every time I register for a new service, I'm told, Please enter at least 12 characters, including uppercase and lowercase letters, numbers, and symbols,'' but I can't think of such a complicated string...''
"I end up reusing the same password for another site I registered in the past because I can't remember it..."
If one of those sites gets hacked, I can't help but worry that all my accounts will be hijacked in an instant.''
In modern society, we manage countless IDs and passwords. However, the standards for creating secure passwords are becoming stricter year by year, and there are limits to the ability to think up and memorize complex character strings that are difficult to guess on your own. In the end, many people rely on reusing simple passwords that are easy to remember, resulting in a vicious cycle of continuing to worry about security.
§2. Explanation of the cause: Why are easy-to-remember passwords and reusing passwords dangerous?
Hackers are targeting your accounts with various automated tools that exploit the limits of human psychology and thinking.
- Brute force attack:
Short passwords containing only alphanumeric characters or 8 characters or less can be broken within seconds to minutes by a program that can make hundreds of millions of attempts per second.
- Dictionary attack:
This is a hack based on a dictionary database'' that lists words that humans can easily think of (words, birthdays, qwerty'', etc.).
- List type hack (for reuse):
This is a method of automatically attempting to log in to other major sites using a list of IDs and passwords leaked from one site. This will wipe out all those who reuse passwords.
Current international security standards (guidelines such as NIST) state that the most important thing is to use a sufficiently strong random password and never reuse it on other sites.''** If you don't reuse it, you won't have to do the troublesome work of regularly changing it once every three months'' like in the past.
However, when using a password generation site, if the generated password is sent to the operator's server, it will be lost if the site itself is hacked.
§3. Solved with tools: Generate cryptographically secure passwords with ZeroTools
"I want to automatically generate passwords that are so strong that I can't remember them myself without any security risks..."
The most secure way to meet this request is our encrypted secure password automatic generation generator.
This tool uses the standard cryptographic random number generator (Web Crypto API) of your PC or smartphone browser to generate a strong random string in a completely local environment. Your password information is never sent over the network, ensuring maximum security.
Solution steps
1. Open Cryptographically secure password automatic generation generator.
2. Specify the number of characters you want to create (16 characters or more is strongly recommended).
3. Turn on the checkboxes for uppercase letters, lowercase letters, numbers, and symbols.
4. If you turn on "Exclude similar characters (exclude those that are hard to see, such as l and 1, o and 0, etc.)", the characters will be easy to use even when not copying and pasting.
5. Click "Generate Password" to generate a random strong password, copy and register.
It is best to save and manage the generated passwords in your browser's autosave function (keychain) or a dedicated password management app. Stop thinking about it yourself and start trusting the tools with safety.