密码和密码短语生成器
创建具有实时强度评估的强随机密码或易记密码短语。在您的浏览器中本地生成，绝不向外发送。
生成密码或密码短语
Length
20 charactersOffline crack estimate: Trillions of centuries (critical infrastructure)
Generated locally via Web Cryptography API (crypto.getRandomValues) and never transmitted.
Tired of managing shared WiFi passwords across your venues?
Shared pre-shared keys leak when employees leave. Purple enables 802.1X enterprise authentication, individual tenant PPSKs, and automated onboarding across Cisco Meraki, Aruba, Ruckus, and Juniper Mist.
更强的凭据，更少的泄露
绝大多数账户被盗都是由于密码重复使用或过短引起的。长随机密码或多单词密码短语可以大幅提高暴力破解的成本，使其远超攻击者的预算。本生成器使用您浏览器的密码学随机数生成器，因此生成的密码绝不会离开您的设备。
此工具为您提供：
- 可自定义长度和字符集的随机密码，并支持排除易混淆字符。
- 基于词库构建的易读密码短语，支持自定义分隔符、大小写及添加可选数字。
- 实时显示以比特（bits）为单位的熵值估算，让您在使用前直观了解密码强度。
Entropy and brute-force cracking benchmarks
Theoretical crack times against an offline 100 billion guess-per-second GPU cluster (standard modern 8x GPU hashcat cracking array). Aligned with NIST SP 800-63B credential recommendations.
| Credential type | Length / composition | Entropy | Offline GPU crack time | Security tier |
|---|---|---|---|---|
| Short alphanumeric | 8 chars (letters + digits) | ~48 bits | 3.6 hours | Vulnerable |
| Standard WiFi password | 16 chars (full charset) | ~105 bits | 130 billion years | Strong |
| WPA3 / Enterprise PSK | 24 chars (symbols + letters) | ~157 bits | Uncrackable | Enterprise grade |
| RADIUS shared secret | 32 chars (hex / ascii) | ~210 bits | Uncrackable | Critical infrastructure |
| 5-Word Diceware phrase | 5 words + 2 digits | ~72 bits | 1.5 million years | Human memorable |
关于密码安全与熵的常见问题
密码熵如何衡量安全强度？
熵以位（bit）为单位衡量凭据的随机性和不可预测性。每增加一位，攻击者必须测试的猜测次数就会翻倍。一个80位的密码需要超过一万亿亿亿次尝试才能进行暴力破解，从而能够有效抵御离线 GPU 破解集群。
WiFi 网络推荐的密码长度是多少？
对于 WPA2-Personal 网络，建议使用至少20个字符，并包含大小写字母、数字和符号，以抵御字典攻击。WPA3-Personal 网络使用 Simultaneous Authentication of Equals (SAE) 来阻止离线字典攻击，但为了确保企业级韧性，仍需要至少16到24个字符。
RADIUS 共享密钥应该有多长？
网络接入点或控制器与认证服务器之间的 RADIUS 共享密钥应至少为24到32个字符。高熵随机字符串可防止离线 HMAC-MD5 数据包解密和恶意认证器注入。
为什么多单词密码句比复杂的短密码更安全？
由五个或更多随机单词组成的密码句可提供超过60到80位的熵，同时易于人类记忆。它们消除了键盘输入错误，并减少了将凭据写在便签纸上的冲动。
此密码生成器会存储或传输生成的凭据吗？
不会。该生成器完全在您的客户端浏览器中运行，并使用 Web Cryptography API (crypto.getRandomValues)。任何生成的密码、密码句或熵参数都不会传输到 Purple 服务器，也不会在其中进行存储。
Enterprise WiFi security architecture and guides
Explore technical blueprints and tools for eliminating shared wireless passwords across your physical locations.
Enterprise WiFi security guide
Learn how 802.1X, PPSK, and WPA3-Enterprise protect corporate networks without shared credentials.
WPA3-Personal vs WPA3-Enterprise
Understand SAE handshakes, 192-bit cryptographic suites, and transition mode trade-offs.
RADIUS setup guide
Step-by-step configuration for FreeRADIUS, Cisco ISE, and Aruba ClearPass integrations.
Multi-tenant iPSK subnet designer
Design isolated private subnets and DHCP scopes for student housing and build-to-rent properties.
Securing your WiFi estate?
Strong credentials are step one. Purple adds WPA2 and WPA3 Enterprise onboarding, per-tenant PPSK, and 802.1X across Cisco Meraki, HPE Aruba, Ruckus, and Juniper Mist so staff and guests connect without shared secrets.
Book a 20-min demoNetforge Network Multi-Tool
Run offline network health checks, path analysis, and latency diagnostic scans directly from your desktop.
Download Multi-Tool