Cách Tạo Mật khẩu An toàn Từng Bước Một
Quick Answer
Để tạo mật khẩu an toàn: mở Password Generator, đặt độ dài tối thiểu 16, bật chữ hoa, chữ thường, chữ số và ký hiệu, rồi nhấn Generate. Công cụ dùng crypto.getRandomValues. Tất cả tạo xảy ra cục bộ.
Introduction
Mật khẩu mạnh là tuyến phòng thủ đầu tiên chống chiếm tài khoản. Mật khẩu yếu như "password123" hoặc "qwerty" có thể bị phá trong mili-giây bằng tấn công brute-force. Mật khẩu an toàn nên dài (tối thiểu 16 ký tự), ngẫu nhiên và dùng mix chữ hoa, chữ thường, chữ số và ký hiệu.
Step by Step
-
Open the Password Generator tool
Go to the Password Generator tool page. The tool provides options for length and character sets, and generates passwords using the Web Crypto API (crypto.getRandomValues).
-
Set the password length
Set the length slider or input to at least 16 characters. For high-value accounts (email, banking, password manager master password), use 20-32 characters. Longer passwords are exponentially harder to crack.
-
Choose character sets
Enable all four character types: uppercase letters (A-Z), lowercase letters (a-z), digits (0-9), and symbols (!@#$%^&*). Using all four maximizes entropy. Avoid excluding symbols just because some websites reject them — instead, find a different service.
-
Generate the password
Click the Generate button. The tool produces a random password using crypto.getRandomValues, which provides cryptographically secure randomness (not Math.random, which is predictable).
-
Copy and store the password
Click Copy to copy the password to your clipboard. Store it in a reputable password manager (Bitwarden, 1Password, KeePass) — never in a plain text file, browser note, or spreadsheet. Use a unique password for every account.
Examples
16-character password (all sets)
Input: Length: 16, Sets: upper+lower+digits+symbols
Output: K9#mX!2vRp$7nLqF
32-character password (maximum entropy)
Input: Length: 32, Sets: upper+lower+digits+symbols
Output: jN8$kP!3wQx&7mZrL#2vFtY@5cBhDg
Passphrase-friendly (letters only)
Input: Length: 20, Sets: upper+lower
Output: XkQmPvRnLwZrFtYcBhDg
Common Problems
- Using Math.random() for passwords —it is not cryptographically secure. Always use crypto.getRandomValues() or a tool that does.
- Reusing passwords across accounts —if one site is breached, all your accounts are compromised. Use a unique password everywhere.
- Storing passwords in plain text files or browser notes —use a reputable password manager with encryption.
- Choosing short passwords —an 8-character password with all character sets has only ~52 bits of entropy, crackable in hours on a GPU farm.
Tips
- Use at least 16 characters for important accounts; 20+ for email and password manager master passwords.
- Enable all character sets (upper, lower, digits, symbols) to maximize entropy per character.
- Use a password manager to generate and store unique passwords for every account —you only need to remember one master password.
- Enable two-factor authentication (2FA) on important accounts —a strong password alone is not enough if the service supports 2FA.