Password Generator

This Applet generates unguessable passwords.

• Make sure you paste the generated passwords somewhere for safekeeping. Doing this also helps verify the value you are pasting blind into web forms.
• The Australian government recommends changing passwords frequently, at least twice a year, to prevent identity theft and using unguessable passwords at least 8 characters long with a mixture of digits and both upper and lower case letters. The password generator defaults to 10 characters. The Australians celebrate a special day in early June to change their passwords.
• Don’t use the same password at multiple sites unless you don’t care at all about the security of any of them.
• A word in the dictionary can be cracked in under a second. That is no security at all.

Advantages

• Password is free. You may generate as many passwords as you please.
• Password is easy to use. You can select your own balance of convenience and security, deciding if you want your password to include digits, lower case letter, upper case letters and/or punctuation.
• Password avoids generating passwords with the characters 0 O 1 l I | in them because they are so easily confused.
• Password is more secure than other password generators because your password is never sent over the Internet, or stored, even temporarily, on a server. Of course, once you receive it, security is up to you.
• Internally, Password uses Oracle’s high security encryption-grade random number generators.
• You, or an expert, can inspect the source code for Password to be sure there is no possible way it can leak your passwords.
• You, or an expert can use Wireshark, to confirm that Password sends no information to any server. Most other password generators have to do this, legitimately, since a server does the calculations to generate the password.
• In a highly secure situation, you can run Password as an application on a secure computer without access to the Internet. It will run on pretty was any computer — anything that supports Java.

Disadvantages

• You must install a recent Java JVM (Java Virtual Machine) on your computer and engage it in your browser.
• You must specially grant permission for it to run.
• It uses cryptography grade pseudorandom numbers. A purist might want to use true random numbers, though there is no practical difference for this application.

Java Requirements and Troubleshooting

Password is a signed Java Applet (that can also be run as an application) to Password Generator. You are welcome to install it on your own website. If it does not work…

1. For this Applet hybrid to work, you must click grant/accept/always run on this site/I accept the risk to give it permission to let you copy/paste. If you refuse to grant permission, the program may crash with an inscrutable stack dump on the console complaining about AccessController.checkPermission.
2. In the Java Control Panel security tab, click Start ⇒ Control Panel ⇒ Programs ⇒ Java ⇒ Security, configure medium security to allow self-signed and vanilla unsigned applets to run. If medium is not available, or if Java security is blocking you from running the program, configure high security and add http://mindprod.com to the Exception Site List at the bottom of the security tab.
3. Often problems can be fixed simply by clicking the reload button on your browser.
4. Make sure you have both JavaScript and Java enabled in your browser.
5. Make sure the Java in your browser is enabled in the security tab of the Java Control panel. Click Start ⇒ Control Panel ⇒ Programs ⇒ Java ⇒ Security ⇒ Enable Java Content in the browser.
6. This signed Java Applet (that can also be run as an application) needs 32-bit or 64-bit Java 1.8 or later. For best results use the latest 1.8.0_131 Java.
7. You also need a recent browser.
8. It works under any operating system that supports Java e.g. W2K, XP, W2003, Vista, W2008, W7-32, W7-64, W8-32, W8-64, W2012, W10-32, W10-64, Linux, LinuxARM, LinuxX86, LinuxX64, Ubuntu, Solaris, SolarisSPARC, SolarisSPARC64, SolarisX86, SolarisX64 and OSX
9. You should see the Applet hybrid above looking much like this screenshot. If you don’t, the following hints should help you get it working:
10. Optionally, you may permanently install the Canadian Mind Products code-signing certificate so you don’t have to grant each time.
11. If the above Applet hybrid appears to freeze-up, click Alt-Esc repeatedly to check for any buried permission dialog box.
12. If you have certificate troubles, check the installed certificates and remove or update any obsolete or suspected defective certificates. The only certificate used by this program is mindprodcert2017rsa.cer.
13. Especially if this Applet hybrid has worked before, try clearing the browser cache and rebooting.
14. To ensure your Java is up to date, check with Wassup. First, download it and run it as an application independent of your browser, then run it online as an Applet to add the complication of your browser.
15. If the above Applet hybrid does not work, check the Java console for error messages.
16. If the above Applet hybrid does not work, you might have better luck with the downloadable version available below.
17. If you are using Mac OS X and would like an improved Look and Feel, download the QuaQua look & feel from randelshofer.ch/quaqua. UnZip the contained quaqua.jar and install it in ~/Library/Java/Extensions or one of the other ext dirs.
18. Upgrade to the latest version of Internet Explorer or another browser.
19. Click the Information bar, and then click Allow blocked content. Unfortunately, this also allows dangerous ActiveX code to run. However, you must do this in order to get access to perfectly-safe Java Applets running in a sandbox. This is part of Microsoft’s war on Java.
20. Try upgrading to a more recent version of your browser, or try a different browser e.g. Firefox, SeaMonkey, IE or Avant.
21. If you still can’t get the program working click the red HELP button below for more detail.
22. If you can’t get the above Applet hybrid working after trying the advice above and from the red HELP button below, have bugs to report or ideas to improve the program or its documentation, please send me an email at.

   Get New Java   Get New Browser  

Download information for Password Generator

Package	Version	Released	Licence	Language	Notes
Password Generator	1.9	2014-04-04	free	Java	❘ precis ❘ screenshot ❘ browse source repository for the current version of Password Generator. Applet to generate unguessable passwords. 649K zip for Password Generator Java source, compiled class files, jar and documentation to run on your own machine either as an application or an Applet. Runs on any OS that supports Java e.g. W2K, XP, W2003, Vista, W2008, W7-32, W7-64, W8-32, W8-64, W2012, W10-32, W10-64, Linux, LinuxARM, LinuxX86, LinuxX64, Ubuntu, Solaris, SolarisSPARC, SolarisSPARC64, SolarisX86, SolarisX64 and OSX. First install the most recent Java. To install, extract the zip download with WinZip, (or similar unzip utility) into any directory you please, often J:\ — ticking off the use folder names option. To check out the corresponding source from the Subversion repository, use the TortoiseSVN repo-browser to access password source in repository with [Tortoise] Subversion client on wush.net/svn/mindprod/com/mindprod/password/. After you have installed the jar, you can run it as an application. Type: java -jar J:\com\mindprod\password\password.jar adjusting as necessary to account for where the jar file is. download ASP PAD XML program description for the current version of Password Generator. $1989.00 US donated so far. If the CMP utilities solved your problem, please donate a buck or two, or donate to one of the charities featured in the footer public service ads throughout the website and get a tax receipt. Password Generator is free. Full source included. You may even include the source code, modified or unmodified in free/commercial open source/proprietary programs that you write and distribute. Non-military use only.

For the Paranoid

Unlike most other generators, passwords generated by my Applet are never sent over the net, where they could in theory be snooped on, particularly by an agency of the American government who have legal and mathematical abilities to crack pretty well anything they please. Passwords are generated in your machine and never leave your machine. Any password generator could in theory retain a copy of the password that it gave you and pass it on to the bad guys. You must trust the author. In the case of my Password generator, you can download the source, examine it for any back doors, or have a programmer friend do so, compile it yourself and run it offline.

standard footer

	This page is posted on the web at:	http://mindprod.com/applet/password.html
	Optional Replicator mirror of mindprod.com on local hard disk J:	J:\mindprod\applet\password.html
	Please read the feedback from other visitors, or send your own feedback about the site. Contact Roedy. Please feel free to link to this page without explicit permission.
	Canadian Mind Products IP:[65.110.21.43] Your face IP:[44.222.134.250]
Feedback	You are visitor number