DEV Community

Shahrouz Nikseresht
Shahrouz Nikseresht

Posted on

Day 29: Python Strong Password Generator, Create Secure Passwords with Random and Constraints

#python #challenge #beginners #programming

Welcome to Day 29 of the #80DaysOfChallenges journey! This beginner-to-intermediate challenge explores building a random password generator that enforces character diversity, guaranteeing at least one uppercase, digit, and special symbol while handling length bounds. It combines random selections, string pools, and shuffling for security, a useful skill for tools or apps needing quick, strong credentials. If you're advancing from basics to practical utilities or interested in randomization with rules, this "Python password generator" walkthrough outlines a function that's customizable and ensures minimum strength without complexity.

💡 Key Takeaways from Day 29: Strong Password Function

This exercise assembles a function that crafts a password of given length, auto-adjusts if needed, and mixes required types before shuffling. It's a balanced demo of constraints in random gen: set pools, pick minima, fill and mix. We'll detail the essentials: function with length adjustment, ensured types via base picks, and random fill plus shuffle.

1. Function Design: Length Checks and Pools

The generate_strong_password function takes a length defaulting to 12, adjusts if out of bounds, and returns a string. Its signature includes a docstring:

def generate_strong_password(length=12):
    """Generate a random strong password with letters, digits, and symbols."""
Enter fullscreen mode Exit fullscreen mode

Handle bounds:

# Automatically adjust length if it's outside the allowed range
if length < 8:
    print("⚠️  Password length is less than minimum 8. Automatically set to 8.")
    length = 8
elif length > 25:
    print("⚠️  Password length exceeds maximum 25. Automatically set to 25.")
    length = 25
Enter fullscreen mode Exit fullscreen mode

Define chars:

# Character pools
chars = string.ascii_letters + string.digits + "!@#$%^&*()_+-=[]{};:,.<>?"
Enter fullscreen mode Exit fullscreen mode

This uses import random, string up top. The function keeps logic self-contained, printing warnings for usability, and scales easily, like adding more symbols or params for custom sets.

2. Ensured Types: Base Selections for Minimums

Start with guarantees:

# Ensure at least one uppercase, one digit, and one symbol
base = [
    random.choice(string.ascii_uppercase),
    random.choice(string.digits),
    random.choice("!@#$%^&*()")
]
Enter fullscreen mode Exit fullscreen mode

This list seeds the password with required diversity. It's a smart way to meet criteria upfront, avoiding loops to check post-gen. The picks draw from subsets, ensuring compliance without bias in the full pool.

3. Random Fill and Shuffle: Complete and Mix

Add the rest:

# Fill the remaining length randomly
base += random.choices(chars, k=length - 3)
Enter fullscreen mode Exit fullscreen mode

Then randomize order:

# Shuffle to avoid predictable patterns
random.shuffle(base)

# Convert list of characters to string
return "".join(base)
Enter fullscreen mode Exit fullscreen mode

choices pulls multiples allowed, fitting passwords. Shuffle prevents patterns like types first. Examples show variety: for 16, a mixed string; for 30, caps to 25 with warning; for 6, ups to 8. It's a flow that produces secure, unpredictable results.

🎯 Summary and Reflections

This password generator blends random with rules, making it a go-to for secure utils. It highlighted for me:

  • Constraint handling: Bounds and minima ensure usability and strength.
  • Random tools: choice for singles, choices for bulk, shuffle for disorder.
  • String ops: Pools via string module, join for final output.

Appreciated how this avoids weak patterns, common in naive gens. Ideas: Add lowercase ensure or param for symbol sets.

Advanced Alternatives: Use secrets module for crypto-secure random, or regex to validate. What's your password gen tip? Comment below!

🚀 Next Steps and Resources

Day 29 applied random to real-world security, teeing up for more utility builds. In #80DaysOfChallenges? Customized the pools? Share your code!

Top comments (0)