Show HN: A password generator that doesn’t spy on you | Hacker News Reader

Show HN: A password generator that doesn’t spy on you

randompasswordgenerator.github.io

2 pointsjanalsncm10 comments

There’s way too much spam on the internet. I was searching the other day for a random password generator for my Mom and the top results were all horrible. I wrote more about it in the “about” section: https://randompasswordgenerator.github.io/about.html

Open articleView on HN

Nice to see an uncomplicated and useful service.

Could do with a recalculate button just because. Also length adjustment doesn't recalculate.

If I set it to lowercase letters only, can it produce "password"?

I looked at the page source and also the source files on Github for your project. Seem very simple and appears to do exactly what it says it will do, namely, generate a password on the client side in the browser with JS. Thanks for your effort on this.

Appreciate it! In the process I learned that the best way to get random numbers is with window.crypto.getRandomValues() which is supposed to be cryptographically secure unlike Math.random().

I'm happy with my password manager's password generator feature (KeepassXC for Linux and KeepassDX for Android)

This is exactly what a password generator that does spy on you would say.

That is definitely true, but you can check for yourself on the network panel. It’s generating the passwords client-side.

Without wishing to rain on this, there are now a number of places where information can be stored locally (local storage etc, cache) and transmitted in bulk at some point in the future. Or simply, it may be reliable today, but will it be tomorrow. It's hard.

That’s . . . a good point. And because of the permissions model of browsers they usually don’t have to request to store cookies or localstorage.

On a related note, the best way to destroy a hard drive is to use a plasma cutter or a nail gun.

https://youtu.be/6JPwXjCZj6o

I'm not sure sarcasm was called for. If you are doing something related to security you need to get it right. No permissions is needed to use local storage so far as I know.

And in a separate comment I did complement you on having produced this.

https://developer.mozilla.org/en-US/docs/Web/API/Window/loca...

Sorry I didn’t mean it as sarcasm at all but rather a failed form of dry humor. Rereading it I can see how you would see it as sarcastic. I’ll edit the last bit, which I added because I find it independently interesting.

Reply on news.ycombinator.com