This form allows you to generate random passwords. The randomness comes from atmospheric noise, which for many purposes is better than the pseudo-random number algorithms typically used in computer programs.
The passwords generated by this form are transmitted to your browser securely (via SSL) and are not stored on the RANDOM.ORG server. Nevertheless, the best data security practice is not to let anyone but yourself generate your most important passwords. So, feel free to use these passwords for your wi-fi encryption or for that extra Gmail account, but you shouldn't use any online service to generate passwords for highly sensitive things, such as your online bank account.
The answer to your question depends on which Bitwarden app/client you are using. If you are using the desktop app, mobile app, or web browser extension, yes, you are presented with the options to change the password generator settings. However, this is not available if you access Bitwarden via the web vault - I am not sure why this is the case, but I suspect it is because most people only use the web vault for managing their account and they find the apps/browser extensions to be much handier for adding new entries.
You are right again - these are not memorable - but I prefer passwords that have an identifiable word on them, like ==55&pushed&BULGARIA&eggs&32==, instead of just random characters like )MtWJPWbc*R7o@SsC7eP5ZSC*K1qgC
but I prefer passwords that have an identifiable word on them, like ==55&pushed&BULGARIA&eggs&32==, instead of just random characters like )MtWJPWbc*R7o@SsC7eP5ZSC*K1qgC
May I ask why? The numbers and symbols make it almost impossible to remember the password, which is the only benefit of word-based passwords, imo. They are way less secure than a password of the same length composed only of characters.
The intent is to serve as a true random number generator, delivering real entropy for the most random data possible. This is suggested for use in generating cryptographic keys for high-value or long-term protection.
One thing I would like to throw out there is do people consider which hand is used to type the password? Because once the password generator spat out a password that required only my left hand. Thought that would make it too easy, so now the program provides a little more spread while keeping some clusters. Not sure if I still have it, wrote it 5 years ago.
You could decrypt it to a temporary location, make the changes, and then save the new encrypted file to the permament location. When editing my GPG'd passwords file I decrypt it to /tmp, which is tmpfs.
Initbox, I recommend using [:alnum:] instead of a-zA-Z0-9 or better is [:graph:], which include symbols. The password to even log into my non-root account is #`o'Hyd3Ob5t. Oh no! Somebody might hack me now! :[
Look at this screen capture:
I cannot press the view password icon. Sometimes in the past I've been able to find a few pixels that I can click on it. However, on this webpage, I cannot click it. It always wants to generate a password. So thus, it's actually broken. It's a bug. But I still have a feature suggestion for dealing with it.
I use both, so I don't agree with the "get rid of it since I don't use it" implications.. and sometimes it's the other way around: the site's "view password" icon obscures LastPass's "Fill this password" button, which is equally annoying when I want that password filled. However, the point stands, that icon should be moved or at least able to be moved so it doesn't interfere with what's already there.
I very carefully said the following:
"when a password field has at least one character." (new emphasis)
Because, some people use it. Of course I do not want limited function, hence wanting access to the Show Password button AND the Generator.
P.S. (Mar 2nd): In regard to the comment about this having been fixed in a recent release, I'm referring primarily to the scenario where the "view password" icon is placed there by the website itself, and thus (I presume) not under control of LastPass.
Remembering strong passwords can be difficult, especially if you use a password generator to create them. Make storing and remembering your passwords easier by using a password manager. This way you will never forget your passwords and they are always at hand.
If 1Password prompts you to save your new password as a new Login item, or if you need to update a different item than what 1Password suggests, you can choose the correct Login item before you save your changes.
In the current way Enpass password generator works it only gives an option to exclude symbols (but not telling what symbols those might be). Unfortunately, most websites don't say create a password and don't use these characters. They either just say use special characters (and not tell you which ones they want you to use). After you try to submit, you typically get the error message saying we only use these ..... Or the sites say use special characters - here are the ones we accept. This is kind of backwards to how Enpass handles special characters when creating passwords.
What I am having to do now is generate a password with what ever special characters you throw at me. I then have to manually go in and either remove the special characters or swap them for ones the site uses. Kind of a pain in the rear to do. Really a pain in the rear to do on sites the require changes every 30, 60 or 90 days.
Will you please Tweak the password generator to add an off/on toggle and a field for us to paste in acceptable special characters that the generator would use to create them correctly. This would allow us to copy/paste from the needed website and generate our passwords without all the extra fuss that is currently there.
The old way would display an overlay in the web page with no association to a specific password. Since this has a number of drawbacks and no clear advantages that I am aware of, it is no longer offered through the Kee popop user interface.
You can still load that old interface via the right-click menu or keyboard shortcut. I intend to remove the old interface entirely soon so I am interested to hear from anyone who can propose reasons to retain it. I do have other enhancements for the new password generator already planned but if there are specific workflows that require the old interface, now is the time to discuss them before the old interface is permanently deleted.
Sometimes you just needed to generate a password to enter into a field without saving a credential to the database. Being able to do that from the toolbar icon and choose a generator rule to create it with was quite handy.
I feel like this would be too out of the way when different sites often have different password requirements. Ideally there should be options you can set in the popup box, with sensible defaults that actually work for most websites.
I was really excited about Lockwise and this glaring hole in the design makes it basically worthless as a password management tool. Did the Lockwise team ever use a password manager before coding this?
I think password generation rules are absolutely crucial. Lockwise needs this now more than ever. There have been sites where I have to manually edit the password, copy it, then paste it into the Confirm password box just to accommodate their rules. Hopefully it can be implemented!!
Another issue I am facing now because of no options is that I had to change a password for a site a second time in quick succession but it will not generate a new password. It just keeps suggesting the same one as before.
Passwords best practices recommend using a strong and unique password for each of your online accounts. But in reality, very few people can follow this guidance. Dependence on memory and force of habit makes people use simple passwords and repeat them across accounts. However, this is a dangerous practice because even one compromised password can make you vulnerable on multiple websites.
When you open a web page that contains a sign-up form or a change password field, Microsoft Edge activates Password Generator. When you select the password field, Password Generator suggests a strong password in a drop-down menu.
Password Generator requires you to be signed in and syncing passwords. If you're signed in but not syncing, you'll see the following setting in Settings and more > Settings > Profiles > Passwords:
I've written a very simple macro to generate complex passwords of varying lengths and styles, from 9-character memorable passwords to 33-character randoms, and a few different lengths in-between. It's simple but I use it 10x per week and sometimes multiple times per day.
It's based on the utility sf-pwgen which can be installed via the brew package manager by pasting brew install sf-pwgen in your terminal. sf-pwgen has some very basic options to tailor the length and type of password.
df19127ead