Password security depends on two factors: entropy (randomness) and length. Entropy measures how unpredictable a password is — higher entropy means more possible combinations, making brute-force attacks computationally infeasible. A 128-bit entropy password (roughly 20 random alphanumeric characters) would take billions of years to crack with current technology.

InfraHub's Password Generator uses crypto.getRandomValues() — the Web Crypto API's true random number generator, seeded by the operating system's entropy source — to ensure every generated password has maximum unpredictability. Passwords are never transmitted or stored.

The generator builds a character set from the selected categories (uppercase, lowercase, digits, symbols). It then uses crypto.getRandomValues() to generate cryptographically secure random indices into the character set for each position in the password. This avoids the bias introduced by Math.random(), which is not cryptographically secure. For bulk generation, multiple independent calls ensure each password is statistically independent.

System administrators generate temporary passwords for new user accounts. Developers create API keys and client secrets for service authentication. DevOps engineers generate random tokens for environment variables and secrets management systems. Security-conscious individuals generate unique, high-entropy passwords for each online account — to be stored in a password manager like Bitwarden or 1Password.