Best Password Managers Reviews

  • Reviews
    • Coupons
    • Free Versions
  • Business
  • Comparison
  • Articles
    • FAQ
  • More
    • Antivirus Software
    • Internet Security Suites
    • Mac Security Suites
    • More Reviews
Best Reviews > Best Password Managers Reviews > Articles > How Password Generators Work

Best Reviews may receive compensation for its content through paid collaborations and/or affiliate links. Learn more about how we sustain our work and review products.

How Password Generators Work

By Istvan F. Verified by Mary P.
Last updated: December 18, 2017

Password Safe's In-Built Password GeneratorOne of the most frequently cited features of password managers is password generation, which is their ability to ease the user's burden of having to come up with a new, suitably complex password.

Passwords generated by such a tool are highly secure, since they contain a mix of randomly generated ASCII characters.

So why not explore the core of these password generators – which are essentially random number generators – to understand how they work and the safety measures they incorporate?


50% Discount for First-Time RoboForm Users (Ad)
RoboForm logo

If you haven’t used RoboForm before, take advantage of our special promotional code and enjoy up to 50% off RoboForm Everywhere (starting at $0.99 per month) or Family (as low as $0.38 per month per user).

Get a 50% Discount

Generate a Password Using a Password Manager App

When you take a password management app and generate a new password there are typically various recipe options available, but in the end something like the following will be created (in this case generated by 1Password's password generator):

e4xH67mD&WU?

l9z3″;Z=0XR*,ze

&2jFXpQ$r~61R=#

Notice that there isn't any pattern to any of these because these passwords are random. Still, there is one thing to know when looking at these passwords: they aren't as ‘random’ as you'd expect, they only look random. Here’s why…

Three Types of Random Number Generators

At the core of every password generator is a machine called a random number generator. There are three kinds of random number generators:

  • Pseudo-random number generators
  • True random number generators
  • Cryptographically secure pseudo-random number generators

Understanding What Random Is

We have some good news and some bad news for you. The bad: what you thought was random actually isn't, because “you can program a machine to generate ‘random’ numbers, but the machine is at the mercy of its programming,” Steve Ward, Professor of Computer Science and Engineering at MIT's Computer Science and Artificial Intelligence Laboratory says. The good: the generated passwords are cryptographically safe.

Roll the dice

A random number generator – or in our case a random password generator – is an algorithm that, based on an initial seed or by means of continuous input, produces a sequence of numbers or bits.

So, the central question is: what is random?

The Merriam-Webster dictionary defines “at random” as “without definite aim, direction, rule, or method”. From this perspective, an algorithm developed by humans based on certain rules for a random number generator doesn't match the definition of “random”; hence questioning its randomness.

According to Ward, computers are “deterministic”, meaning that if you ask the same question, you'll get the same answer every single time. If not, the computer is broken. In other words, computers are designed to eliminate randomness by default: to follow rules and rely on algorithms as they compute, as Ward explains.

Slot machine

The deterministic nature of computing makes other computers guess what's going to happen based on previous information. Just a quick example: a Russian hacker who calls himself Alex was able to reverse-engineer the random number generator at the core of a certain type of slot machine, and the four-person team set up by him was able to earn more than a $250,000 per week just by flying from one casino to another and hacking slot machines.

Randomness is the exact opposite of what computers do; that's why deterministic machines can't generate truly random number sequences. This is why they turn to pseudo-random number generators or cryptographically secure pseudo-random number generators.

Are the Passwords Generated by Password Generators Safe?

Passwords safely stored in a vaultGenerally speaking, they are safe, says Andrea Rock in a study entitled Pseudorandom Number Generators for Cryptographic Applications. To protect against hacker attack, password generators often “use cryptographic primitives such as hash functions (SHA-1 or MD5) or block ciphers (DES, Triple-DES, AES) for mixing the input or for masking the inner state against the output,” she writes.

It is recommended that you have a look at the password generator that is used in a password manager before committing to one service. Some use only pseudo-random number generators (PRNGs), while others use cryptographically secure pseudo-random number generators (CSPRNGs). Dashlane and 1Password, for example, use CSPRNGs, which protects the user by creating randomized passwords and encryption keys and making them suitable for such purposes.

Is it Possible for a Machine to Generate Truly Random Strings?

Compared to PRNGs, True Random Number Generators (TRNGs) use a physical phenomenon as a source to create randomness and introduce it into a computer. This could be a variation of someone's mouse movements, a radioactive source or atmospheric noise (easy to pick up with a normal radio).

By using a physical phenomenon as a source, the process of generating random numbers involves identifying little, unpredictable changes in the data. Hence, the string generated becomes non-deterministic. This makes TRNGs feasible for applications such as lotteries and draws, games and gambling, security, and more.

Best Password Managers of 2023

RankProviderInfoVisit
1
Editor's Choice 2023
RoboForm
  • Simple and straightforward client
  • Categorization of stored credentials
  • Biometric authentication
  • Versatile customer service
  • Review:
Visit RoboForm50% Off
2
NordPass
  • Strong security features
  • Password generator
  • Excellent free-forever version
  • Attractive price
  • Review:
Visit
3
1Password
  • End-to-end encryption
  • Secure authentication method
  • Data breach alarms
  • One-time password support
  • Review:
Visit

Get the Best Deals on Password Managers

Subscribe to our monthly newsletter to get the best deals, free trials and discounts on password managers.

Thank you for subscribing please check your email account for confirmation email!
By subscribing to our newsletter you agree to our privacy policy and terms of use.
Tab title

Category: Articles

Best Password Managers

# 1RoboForm Reviews
# 2NordPass Reviews
# 31Password Reviews

Recent Articles

  • Password Depot Coupons
  • Password Depot Free Versions
  • Password Depot Reviews
  • 6 Corporate Password Policies for Maximum Security
  • How Password Managers Keep Data Safe in a Breach

Recent Posts

  • Password Depot Coupons
  • Password Depot Free Versions
  • Password Depot Reviews
  • 6 Corporate Password Policies for Maximum Security
  • How Password Managers Keep Data Safe in a Breach

Recent Comments

  • Daniel (Best Reviews Team) on The Best Password Organizer Books
  • Andrea on The Best Password Organizer Books
  • Daniel (Best Reviews Team) on Dashlane vs Bitwarden Comparison
  • Marion on Dashlane vs Bitwarden Comparison
  • Daniel (Best Reviews Team) on Keeper Reviews

Archives

  • July 2023
  • June 2023
  • March 2023
  • February 2023
  • January 2023
  • June 2022
  • May 2022
  • February 2022
  • January 2022
  • December 2021
  • April 2021
  • February 2021
  • December 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • June 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • June 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017

Categories

  • Articles
  • Comparisons
  • Coupons
  • Free Versions
  • Reviews

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org

Recent Articles

  • Password Depot Coupons
  • Password Depot Free Versions
  • Password Depot Reviews
  • 6 Corporate Password Policies for Maximum Security
  • How Password Managers Keep Data Safe in a Breach

More Info

  • Best Password Managers for Businesses
  • Best Password Managers for Families
  • Best Password Managers for Google Chrome
  • Best Password Managers for iPhone
  • Best Password Managers for Mac

Best Reviews

Best Reviews may receive compensation for its content through paid collaborations and/or affiliate links. Learn more about how we sustain our work and review products.

Best Reviews © 2023 · Privacy Policy · Terms of Use · Contact Us