🔑 Key Vault Generator

Why Client-Side Cryptographic Randomness Matters

Standard pseudo-random number generators (such as standard Math.random()) are mathematically deterministic. They rely on predictable internal seeds, making generated passwords vulnerable to reverse engineering by adversaries.

1. CSPRNG (Hardware-Seeded Randomness)

Key Vault utilizes window.crypto.getRandomValues()—a Cryptographically Secure Pseudo-Random Number Generator (CSPRNG). Your browser queries underlying operating system entropy pools (such as atmospheric thermal noise, hardware interrupts, and timing jitter) to produce true unguessable randomness.

2. Entropy & Brute Force Mathematics

Password strength is measured in information entropy bits using the formula:
E = L × log2(R)
Where L is the length of the string and R is the pool size of unique candidate characters.

• Under 40 bits: Crackable in seconds with modern GPUs.
• 50–70 bits: Resistant to basic brute-force attacks, suitable for casual accounts.
• 80–128+ bits: Statistically impossible to brute-force within the lifespan of the known universe, even with future quantum computers.

3. The Power of Diceware Passphrases

Long, memorable phrases composed of four or five randomly chosen words (e.g. Galaxy-Cascade-Vortex-Cobalt-9) offer over 70 bits of entropy. They are exponentially harder for computers to brute-force than short complex strings like P@55w0rd!, while remaining effortless for humans to type on mobile touchscreens without errors.