F

随机密码生成器Password Generator

生成高强度随机密码，支持自定义长度和字符集Generate strong random passwords with customizable length and charset.

关于 随机密码生成器About Password Generator

绝大多数账号被盗都源于弱密码或密码复用。本工具基于浏览器提供的密码学安全随机源生成高强度随机密码，支持自定义长度与字符集（大小写、数字、特殊符号），满足银行、企业系统等各类复杂度要求。Most account takeovers stem from weak or reused passwords. This tool generates strong random passwords using a cryptographically secure random source in the browser, with customizable length and character sets (uppercase, lowercase, digits, symbols) to meet the complexity rules of banks, enterprise systems and more.

使用方法How to Use

  1. 通过滑杆设置密码长度，重要账号建议 12 位以上。Set the password length with the slider — 12+ characters is recommended for important accounts.
  2. 勾选需要包含的字符类型：大写字母、小写字母、数字、特殊符号。Tick the character types to include: uppercase, lowercase, digits and symbols.
  3. 点击生成按钮获得随机强密码，可多次生成挑选。Click generate to get a strong random password; regenerate as often as you like.
  4. 复制密码并保存到密码管理器中，避免明文记录在纸面或聊天工具里。Copy the password into a password manager instead of writing it down in plain text.

常见问题FAQ

密码设置多长才安全？How long should a password be?

长度对安全性的贡献大于复杂度。重要账号建议 12–16 位以上；若服务支持，使用更长的随机密码或密码短语更好。Length contributes more to security than complexity. Use 12–16+ characters for important accounts; longer random passwords or passphrases are even better where supported.

生成的密码是真正随机的吗？Are the generated passwords truly random?

是。工具使用浏览器的加密级安全随机数接口（而非可预测的 Math.random），生成的结果不可被攻击者预测。Yes. The tool uses the browser’s cryptographically secure random API (not the predictable Math.random), so results cannot be predicted by an attacker.

每个网站都应该用不同的密码吗？Should I use a different password for every site?

应该。密码复用意味着一个网站泄露、全部账号遭殃。用生成器为每个站点生成唯一密码，并交由密码管理器保存，是当前的最佳实践。Yes. Reuse means one breach compromises everything. Generating a unique password per site and storing it in a password manager is the current best practice.

生成的密码是真正的随机数吗？Are the generated passwords truly random?

使用浏览器 crypto.getRandomValues 这一加密安全随机源生成，而非 Math.random 伪随机数，可用于密码等敏感场景。They are produced with the browser's cryptographically secure crypto.getRandomValues, not Math.random — safe for passwords and other sensitive use.

生成的密码会被记录或上传吗？Are generated passwords stored or uploaded?

不会。所有生成都在浏览器本地完成，密码不会离开你的设备，也不会写入任何存储、日志或统计。No. Everything is generated locally in your browser; passwords never leave your device and are not written to any storage, log or analytics.

相关阅读Related Reading

MD5/SHA1/SHA256 怎么选：哈希碰撞、加盐与密码存储的正确姿势Choosing Between MD5, SHA1 and SHA256: Collisions, Salting and the Right Way to Store Passwords

哈希不是加密，MD5 也不是"过时了就不能用"——算法选型取决于场景。本文从碰撞攻击的真实数据出发，讲清通用哈希与密码哈希的本质区别，以及加盐、bcrypt、Argon2 各自的适用边界Hashing is not encryption, and MD5 is not "obsolete so never use it" — algorithm choice depends on the scenario. Starting from real collision-attack data, this article explains the fundamental difference between general-purpose hashes and password hashes, and where salting, bcrypt and Argon2 each fit.

密码安全指南：为什么弱密码屡禁不止，如何真正防住A Practical Guide to Password Security

每年泄露榜单上 "123456" 依然名列前茅。本文解释弱密码与密码复用的真实风险，给出强密码的三个特征，以及“生成器 + 密码管理器 + 两步验证”的落地方案。"123456" still tops breach lists every year. This article explains the real risks of weak and reused passwords, the three traits of a strong password, and a practical setup combining a generator, a password manager and two-factor authentication.

相关工具Related Tools

JSON 格式化JSON Formatter

在线JSON格式化、校验、压缩、美化工具Online JSON formatter, validator, compressor and beautifier.

正则表达式测试Regex Tester

在线正则表达式测试工具，实时匹配高亮Online regex tester with real-time matching and highlighting.

UUID 生成器UUID Generator

在线生成UUID/GUID，支持批量生成Generate UUID/GUID online, supports batch generation.

JSON 转换工具JSON Converter

JSON与XML/CSV/YAML格式互相转换Convert JSON to/from XML, CSV and YAML formats.