Czy generator Passly.pl jest darmowy?

Tak, nasze narzędzie jest całkowicie darmowe i dostępne online bez żadnych ograniczeń.

Czy wygenerowane hasła są bezpieczne?

Hasła tworzone są lokalnie w Twojej przeglądarce przy użyciu bezpiecznego generatora liczb losowych (Web Crypto API) i nigdzie nie są zapisywane.

Czy mogę wygenerować wiele haseł jednocześnie?

Tak! Nasze narzędzie pozwala generować od razu kilka haseł, kopiować je zbiorczo lub pobrać jako plik tekstowy.

Jakie są najczęstsze rodzaje ataków na hasła?

Atak brute-force sprawdza kolejno wszystkie możliwe kombinacje znaków. Atak słownikowy próbuje popularnych haseł i ich odmian. Credential stuffing wykorzystuje dane z wcześniejszych wycieków przy ponownym użyciu tego samego hasła. Phishing nakłania użytkownika, by podał hasło dobrowolnie na fałszywej stronie.

Czym jest entropia hasła?

Entropia to miara nieprzewidywalności hasła wyrażana w bitach — im wyższa, tym więcej prób potrzeba, by je złamać metodą brute-force. Zależy od długości hasła oraz liczby możliwych znaków w każdej pozycji.

Co zmieniły wytyczne NIST z 2017 roku dotyczące haseł?

NIST SP 800-63B odszedł od wymuszania częstej zmiany hasła i sztywnych reguł złożoności, rekomendując zamiast tego długie hasła lub frazy oraz sprawdzanie ich względem baz znanych wycieków.

Czym jest uwierzytelnianie dwuskładnikowe (2FA)?

2FA wymaga oprócz hasła drugiego elementu potwierdzającego tożsamość — kodu z aplikacji uwierzytelniającej, klucza sprzętowego lub biometrii. Ogranicza to skutki wycieku samego hasła.

Terms of Service – Passly.pl

§1. General Provisions and Definitions

Using the Service means accepting these Terms of Service in full. If you do not accept any of its provisions, please do not use the Service.

Provider — the owner and administrator of Passly.pl, contact: contact@passly.pl.
Service — the website available at passly.pl together with all its features (password generator, password and email breach checking).
User — any person using the Service.
Terms — this document, setting out the rules for using the Service.

§2. Type and Scope of Services

The Service provides the following features free of charge, with no registration or personal data required:

a password generator running locally in the browser (modes: characters, passphrase, PIN, hex/Base64 key),
checking whether a password has appeared in known data breaches (Have I Been Pwned),
checking whether an email address has appeared in known data breaches (XposedOrNot),
additional tools: password strength analysis, password-list export, QR code generation.

The Provider reserves the right to change, extend, limit, or temporarily disable individual features of the Service without prior notice, in particular for technical reasons.

§3. Conditions of Use

Using the Service requires a device with internet access and a web browser with JavaScript enabled.
The Service may be used by persons with full legal capacity; minors should use the Service with the consent and under the supervision of a legal guardian.
It is forbidden to use the Service for unlawful purposes, including gaining unauthorized access to other people’s accounts or systems.
Automated, bulk requests to the Service (e.g. by bots) that disrupt its operation or violate the terms of use of the external services it relies on (Have I Been Pwned, XposedOrNot) are forbidden.

§4. Liability and Disclaimer of Warranty

The Service is provided "as is", without any warranties, to the extent permitted by applicable law.
Despite using a cryptographically secure random number generator, the Provider does not guarantee that any generated password cannot be broken — password security also depends on how the User stores and uses it.
Breach-check results come from external databases (Have I Been Pwned, XposedOrNot), which may be incomplete or outdated. No result found in a database is not a guarantee that the data has not leaked.
The User is solely responsible for storing, securing, and using any passwords generated or checked through the Service.
To the maximum extent permitted by law, the Provider is not liable for any direct or indirect damages arising from the use of, or inability to use, the Service.

§5. Intellectual Property

The name Passly.pl, its logo, visual design, and source code are protected by copyright and are the property of the Provider, unless stated otherwise.
Passwords generated by the Service are random character strings and do not constitute a copyrighted work — the User may use them freely without any restrictions.
Names, trademarks, and logos of third parties (e.g. RoboForm, Have I Been Pwned) belong to their respective owners and are used solely for informational purposes.

§6. Advertising and Affiliate Links

The Service may display ads via Google AdSense.
The Service contains affiliate (partner) links, e.g. to RoboForm — clicking such a link and making a purchase with the partner may result in a commission for the Provider, with no impact on the price paid by the User. Links of this type are labeled "Recommended partner".
Recommendations of partner products are informational in nature and do not constitute professional advice or a guarantee of the quality of a third party’s services.

§7. Personal Data

The rules for processing personal data and cookies are described in a separate document — the Privacy Policy, which forms an integral supplement to these Terms.

§8. Complaints and Contact

Any comments, questions, or complaints about the operation of the Service can be submitted to contact@passly.pl. The Provider makes reasonable efforts to respond within 14 business days.

§9. Changes to These Terms

The Provider reserves the right to amend these Terms at any time. The amended version applies from the moment it is published on the Service. Continued use of the Service after changes are introduced constitutes acceptance of them.

§10. Final Provisions

Matters not regulated by these Terms are governed by Polish law.
The parties will attempt to resolve any disputes amicably; failing agreement, the competent court will be determined in accordance with applicable law.
If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall remain in full force.