Cryptographic Security & NIST Best Practices
How does client-side CSPRNG password generation work?
Our generator utilizes the browser's native Cryptographically Secure Pseudorandom Number Generator (CSPRNG) via the W3C Web Crypto API (window.crypto.getRandomValues). This guarantees unpredictable, high-entropy randomness generated locally on your device without sending any data over the Internet.
What is password entropy and why does default length matter?
Password entropy quantifies how hard a password is to guess or brute-force, measured in bits. A 24-character password combining uppercase, lowercase, numbers, and symbols yields ~157 bits of entropy, exceeding NIST SP 800-63B standards and making brute-force cracking mathematically impossible with current technology.
Are generated passwords logged on AkreTrix servers?
No. Zero data is sent to any server or logged in any database. The entire process runs 100% locally inside your web browser execution environment.