Générateur de Mots de Passe
Les mots de ce champ remplacent la liste de mots par défaut. Vous pouvez saisir des mots dans n'importe quelle langue.
Introduction
Le Générateur de Mots de Passe Toollect est un outil de sécurité basé sur le navigateur qui crée des mots de passe et phrases de passe forts et cryptographiquement aléatoires.
Weak passwords remain the leading cause of account compromise. The Toollect Password Generator eliminates human bias from password creation by using the Web Crypto API's cryptographically secure random number generator. Every password is produced from true entropy, not predictable algorithms or human patterns.
Unlike server-based password tools that transmit your potential credentials over the network, the Toollect Password Generator operates entirely within your browser. No data is sent to any server, stored in any database, or logged in any session. This privacy-first approach ensures that your generated passwords remain known only to you.
Fonctionnement
The Password Generator operates in two distinct modes, each powered by cryptographically secure random number generation.
Mode Aléatoire
Le générateur construit un mot de passe caractère par caractère à partir des jeux de caractères sélectionnés. Chaque caractère est sélectionné avec crypto.getRandomValues(). Un mélange Fisher-Yates est appliqué après l'assemblage.
-
Character selection pool: The generator combines your chosen sets — uppercase letters (A-Z), lowercase letters (a-z), digits (0-9), and symbols (!@#$%^&*). You may also enable the "Exclude ambiguous" option to remove characters that are easily confused (i, l, 1, L, o, 0, O).
-
Guaranteed coverage: The generator ensures at least one character from each selected set appears in the final password. This prevents passwords like "AAAAAAAA12" when you selected uppercase, lowercase, and digits — even random selection must include each type.
-
Cryptographic randomness: Each character is selected using
crypto.getRandomValues(), which draws from the operating system's entropy sources. This is the same source used by TLS/SSL and disk encryption systems. -
Fisher-Yates shuffle: After assembly, the password undergoes an unbiased Fisher-Yates shuffle to randomize character order, eliminating any positional bias from the guaranteed-coverage step.
Mode Phrase de passe
Utilise la liste courte de mots EFF #1 (1296 mots anglais courants). Chaque mot apporte environ 10,3 bits d'entropie. Vous pouvez également fournir vos propres mots.
-
Word list: The built-in list is the EFF Short Word List #1 (1296 short, common English words). Each word contributes approximately 10.3 bits of entropy (log2(1296)).
-
Custom words: You may supply your own words via the custom words field. The generator uses your words instead of the default list, enabling passphrases in any language.
-
Assembly: The generator randomly selects the requested number of words, optionally capitalizes each, joins them with your chosen separator, and appends a random digit and/or symbol if configured.
Calcul de la force
La force est mesurée en bits d'entropie : Faible (0-29), Moyen (30-49), Bon (50-69), Fort (70-99), Très fort (100+).
The entropy calculation uses these formulas:
- Random passwords: entropy = length × log2(charset size)
- Passphrases: entropy = word count × log2(word list size)
Utilisation
Using the Toollect Password Generator requires no setup or registration. Follow these steps:
-
Choisir le mode — Aléatoire ou Phrase de passe
Select either Random or Passphrase using the tabs at the top of the tool.
-
Configurer Aléatoire — Ajuster la longueur, sélectionner les jeux de caractères
Adjust the length slider (8-128 characters) and check or uncheck character sets: Uppercase, Lowercase, Numbers, Symbols. Optionally enable "Exclude ambiguous characters" to remove easily confused characters.
-
Configurer Phrase — Ajuster le nombre de mots, séparateur, options
Adjust the word count slider (3-12 words). Select a word separator (Space, Hyphen, Underscore, Dot, or None). Optionally enable Capitalize, Add a random number, or Add a random symbol. Optionally enter custom words in the text area to replace the default word list.
-
Générer — Cliquer sur Générer
A password or passphrase appears in the output area.
-
Check strength — Review the strength indicator below the password to evaluate its security level.
-
Copier — Dans le presse-papiers
Click Copy to copy the password to your clipboard, then paste it into your account registration or password manager.
-
Clear to reset — Click Clear to reset the output and start over.
Tutoriel
Scénario 1 : Mot de passe aléatoire pour les réseaux sociaux
Ouvrez le générateur. Longueur 16. Activez majuscules, minuscules, chiffres. Excluez les ambigus. Générez. Copiez.
Scenario 1: Creating a random password for a social media account
-
Open the Password Generator. The tool opens in Random mode by default.
-
Set the length to 16 by dragging the slider. The current value displays next to the Length label.
-
Ensure the following checkboxes are checked: A-Z (Uppercase), a-z (Lowercase), 0-9 (Numbers). Leave Symbols unchecked — many social media platforms accept alphanumeric passwords.
-
Check "Exclude ambiguous characters" to prevent confusion between similar-looking characters like
1(one) andl(lowercase L). -
Click Generate. A 16-character password appears in the output area. The strength indicator should display "Strong" or "Very Strong".
-
Click Copy to copy the password. Paste it into your social media account's password field.
-
Click Clear to reset when you are satisfied.
Scénario 2 : Phrase de passe pour e-mail
Passez en mode Phrase. 5 mots. Espace comme séparateur. Activez la capitalisation et un chiffre. Générez.
Scenario 2: Creating a passphrase for your email account
-
Switch to Passphrase mode by clicking the Passphrase tab.
-
Set the word count to 5. A 5-word passphrase from the EFF word list provides approximately 51 bits of entropy.
-
Select "Space" as the word separator for the classic xkcd-style passphrase format.
-
Check "Capitalize each word" and "Add a random number". Leave "Add a random symbol" unchecked — most email services accept alphanumeric passwords with spaces.
-
Click Generate. A passphrase like "Plank Lunch Quilt Ivory Sunset7" appears.
-
Review the strength — it should show at least "Strong" for 5 words.
-
Click Copy and use the passphrase for your email account. The spaces and capitalization make it easier to type correctly on both desktop and mobile devices.
Conseils professionnels
-
Utilisez 6-7 mots pour le mot de passe maître
-
Ajustez la longueur selon la sensibilité du compte
-
Utilisez des mots personnalisés pour des phrases inoubliables
-
Combine modes for Wi-Fi passwords: Generate a random password of 20+ characters for your Wi-Fi network. Wi-Fi passwords are entered once and stored on devices, so memorability is not important — maximum entropy is.
-
Generate multiple passwords at once: Click Generate repeatedly to produce several candidate passwords. Compare them and pick the one that is easiest for you to use while maintaining the desired strength level.
-
Use the strength indicator as a minimum threshold: Aim for at least "Strong" (70+ bits of entropy) for any password protecting sensitive data. "Very Strong" (100+ bits) is appropriate for encryption keys and master passwords.
Alternatives
While the Toollect Password Generator excels at browser-based password creation with privacy-first processing, several alternatives exist for different use cases.
| Outil / Méthode | Meilleur pour | Limitations |
|---|---|---|
| Toollect Générateur | Navigateur, phrases, confidentialité | Internet pour chargement |
| Gestionnaire intégré (Porte-clés iCloud, Google, Bitwarden) | Synchronisation multi-appareils | Lié à l'écosystème |
| Diceware manuel | Environnements isolés | Nécessite des dés |
| Command-line tools (openssl rand, pwgen) | Scripted generation in development environments | No GUI, requires terminal access, no strength visualization |
| xkcd-style method | Creating memorable passphrases manually | Relies on human randomness, which is predictable and biased |
| Online password generators | Quick generation without installation | Privacy risk — passwords are transmitted over the network |
For most users who need instant, secure, and private password generation with the flexibility of both random and passphrase modes, the Toollect Password Generator offers the best balance of features, security, and convenience.
Dépannage
| Problème | Cause | Solution |
|---|---|---|
| Caractères ambigus | Option désactivée | Activer l'exclusion |
| Faible en court | Longueur < 10 | Augmenter la longueur |
| Copie échoue | Problème de permission | Utiliser Ctrl+C |
| Passphrase uses unexpected words | Custom words field is empty, defaulting to EFF word list | The tool defaults to the English EFF list. Fill in the custom words field with your own words |
| Cannot type in the output field | The output field is read-only by design | Click Generate to create a password, then use the Copy button |
| Generated password is rejected by a website | Website has specific character restrictions | Check the website's password policy and adjust character sets accordingly. Try disabling Symbols |
| Passphrase exceeds maximum length allowed by a service | Word count or separator choices produce a very long string | Reduce word count, use "None" separator, or switch to Random mode with a shorter length |
| The tool does not work offline | The page must be loaded first while online | Load the page while connected to the internet. Once loaded, it works offline for that session |
Spécifications techniques
The Toollect Password Generator is engineered for security, performance, and broad compatibility.
Performance Benchmarks
| Length | Generation Time | Memory Usage |
|---|---|---|
| 16 characters | < 1 ms | < 1 MB |
| 64 characters | < 1 ms | < 1 MB |
| 128 characters | < 2 ms | < 1 MB |
Technical Details
- Générateur aléatoire :
crypto.getRandomValues()(API Web Crypto) — cryptographically secure, backed by operating system entropy - Liste de mots : EFF Short Word List #1 (1296 mots), embedded in the application code
- Algorithme de mélange : Fisher-Yates (unbiased, O(n))
- Calcul de force : Entropy-based calculation: For random passwords, entropy = length × log2(charset size). For passphrases, entropy = word count × log2(1296).
- Seuils : Faible 0-29, Moyen 30-49, Bon 50-69, Fort 70-99, Très fort 100+ bits
- Clipboard API:
navigator.clipboard.writeText()with visual feedback - Event Model: Button click triggers generation; slider inputs update configuration in real-time
Browser Compatibility
| Browser | Minimum Version | Status |
|---|---|---|
| Google Chrome | 80+ | Full support |
| Mozilla Firefox | 75+ | Full support |
| Apple Safari | 13+ | Full support |
| Microsoft Edge | 80+ | Full support |
| Samsung Internet | 13+ | Full support |
| Opera | 67+ | Full support |
Privacy & Security
- Zero data transmission: all password generation occurs in the browser's memory
- No cookies, localStorage, or sessionStorage used
- No analytics or tracking scripts on the tool page
- Fully functional in offline mode after initial page load
- No registration, login, or API keys required
- Uses cryptographically secure random number generation (not Math.random())
Fonctionnalités
- Génération de mots de passe aléatoires avec longueur configurable (8-128) et jeux de caractères
- Mode phrase de passe avec liste de mots EFF pour des mots de passe mémorisables et sécurisés
- Prise en charge de mots personnalisés dans n'importe quelle langue
- Indicateur de force en temps réel basé sur le calcul d'entropie
- Génération aléatoire cryptographiquement sécurisée (crypto.getRandomValues)
- 100% traitement côté client sans téléchargement de données