The Mathematics of Security
A secure password is defined by its resistance to brute-force and dictionary attacks. Keysmith utilizes the native Web Crypto API (CSPRNG) to generate true cryptographic randomness locally on your device. We employ rejection sampling to ensure a mathematically uniform distribution of characters, eliminating modulo bias vulnerabilities found in standard generators.
Frequently Asked Questions
What is Password Entropy?
Entropy is a scientific measure of unpredictability, calculated in bits. It represents the number of guesses an attacker would need to crack your password. An entropy of 80 bits or higher is considered highly secure for modern cryptographic standards.
Are my passwords stored anywhere?
No. Keysmith operates 100% client-side. The JavaScript execution happens entirely within your browser's memory. No data is ever transmitted over the network or saved to a database.
Why exclude ambiguous characters?
Characters like an uppercase 'I' and a lowercase 'l' look identical in many fonts. Excluding them prevents usability errors when you need to manually type the password into a device that doesn't support clipboard syncing.
Security Guides
How to Create a Strong Password You Can Actually Remember
How Long Should a Password Be? The Real Answer, With the Math