Passwords Generator

Question

What is the best and safest random password generator for a windows machine?

Answer 1

Hello. There is no single "best" password generator; the underlying principles of password generators are quite simple, and most are similar in design and equally secure. Therefore, the best choice depends entirely on your specific needs.

For most users, the password generation feature built into Microsoft Edge is more than sufficient to meet their requirements. However, if you have more advanced needs regarding password management and storage, Bitwarden may be a more feature-rich and secure option.

Answer 2

The best type of password has two properties: (1) many characters; and (2) high entropy.

For a password, 'entropy' is the quality of being random, so high entropy means a high degree of randomness.

You can search the internet for "high entropy password generators" (without the quotes) and find several good websites. Just be sure that the password generator you choose comes from a recognized and well-respected source.

As for the number of characters: I used 25 characters. However, I no longer use passwords. Instead, I have passkeys, which are much more secure than any password you can think of. Even if you were to choose a maximum entropy 200-character password, it will do you no good if your password is stolen by a hacker or exposed in a data breach.

Answer 3

On a Windows machine, the safest approach is to use password generators that rely on approved cryptographically secure random number generators and follow strong-password guidance.

Recommended options based on Microsoft guidance:

1. Microsoft Edge Password Generator (for websites and online accounts)
   • Built into Microsoft Edge and uses strong, unique passwords for each site.
   • Automatically generates and suggests complex passwords and saves them in the browser, syncing across signed‑in devices.
   • Works together with Password Monitor to alert when a saved password is found in a known breach so it can be changed.
   • Details: see “Use Password Generator to create more secure passwords in Microsoft Edge” and “Protect your online accounts using Password Monitor”.
2. Windows LAPS (for local admin passwords in managed environments)
   • For IT/enterprise scenarios, Windows Local Administrator Password Solution (Windows LAPS) automatically generates and rotates random local administrator passwords.
   • Uses well‑defined character sets and lengths, with multiple complexity levels (uppercase, lowercase, numbers, symbols, and improved‑readability sets).
   • Passwords are truly random (no human bias) and can be configured from 8–64 characters, with entropy documented per length/complexity.
   • Also supports random passphrases (multi‑word) on supported Windows versions.
3. Custom development: use only approved RNG APIs
   • For custom tools or scripts that generate passwords, Microsoft’s security guidance requires using approved random number generators, not general‑purpose PRNGs like rand or System.Random.
   • Approved options include, for example:
     • CNG: BCryptGenRandom
     • CAPI: CryptGenRandom
     • Win32/64: RtlGenRandom, rand_s
     • .NET: RNGCryptoServiceProvider or RNGCng
   • These APIs are designed for cryptographic use and are appropriate for generating password characters.

General rules for strong passwords (regardless of generator):

• At least 12 characters (14 or more is better).
• Mix of uppercase, lowercase, numbers, and symbols.
• Not based on dictionary words, names, or previous passwords.
• Easy to remember only if manually created (for example, using a phrase technique), but hard to guess.

For most home Windows users, the best and safest practical choice from Microsoft’s ecosystem is Microsoft Edge Password Generator combined with a password manager (Edge’s built‑in manager or another reputable one). For organizations managing local admin accounts, Windows LAPS is the recommended secure generator and rotation mechanism.

---

References:

• Create and use strong passwords
• Windows LAPS passwords and passphrases
• Security Frame: Cryptography | Mitigation
• The keys to the kingdom - securing your devices and accounts
• Learn about security features in Microsoft Edge
• Passwords technical overview