password generation site's program is not properly secured or if the site is compromised in some way. Without a secure channel, it is not possible to prevent eavesdropping, especially over public networks such as the Internet. A possible solution to this issue is to generate the password using a client-side programming language such as JavaScript. The advantage of this approach is that the generated password stays in the client computer and is not transmitted to or from an external server. See also Cryptographically secure pseudorandom number generator Diceware Hardware random number generator Key size Master Password (algorithm) Password length parameter Password manager References External links Cryptographically Secure Random number on Windows without using CryptoAPI from MSDN RFC 4086 on Randomness Recommendations for Security (Replaces earlier RFC 1750.) Random Password 12 Characters Generator Online [Free] Password authentication Applications of randomness Cryptographic algorithms