Randomness quietly powers a surprising amount of the software you use every day. When you generate a strong password, shuffle a music playlist, run a simulation, or play a game of chance, a piece of code called a random number generator (RNG) is doing the work behind the scenes. Yet very few people ever stop to ask what "random" actually means to a computer, or why some sources of randomness are far more trustworthy than others.
This article explains, in plain language, how random number generation works, the difference between the two main types of generator, and why the quality of an RNG matters just as much for a password manager as it does for a regulated online game. Understanding these fundamentals will help you make better decisions about the tools you trust with unpredictability.
What "Random" Means to a Computer
Computers are deterministic machines. Given the same inputs, they produce the same outputs every time. That property is wonderful for reliability, but it is the exact opposite of what you want when you need something unpredictable. To bridge that gap, software uses one of two broad approaches to manufacture randomness.
- Pseudo-random number generators (PRNGs): These use a mathematical formula that starts from an initial value called a seed and produces a long sequence of numbers that looks random. If you know the seed and the algorithm, you can reproduce the entire sequence exactly. Ordinary PRNGs are fast and perfectly fine for shuffling a playlist or generating test data, but they are not secure on their own.
- True random number generators (TRNGs): These draw entropy from unpredictable physical phenomena — electrical noise, the precise timing of keystrokes, or hardware sensors. Because the source is genuinely unpredictable, the output cannot be reproduced or guessed, even if an attacker knows exactly how the generator is built.
Modern security software combines the two: a small amount of true entropy is used to seed a cryptographically secure pseudo-random generator (a CSPRNG), which then produces high-quality random output quickly and safely. This hybrid approach gives you both speed and unpredictability.
Why Password Generators Depend on Good RNG
The password generator built into a tool like EZ Password Secure is a practical example of randomness in action. When you ask it for a new password, it uses a cryptographically secure generator to pick each character independently and unpredictably. That is what makes the result resistant to the attacks we described in our password security guide.
The danger of a weak generator is subtle but real. If a password tool used an ordinary PRNG with a predictable seed — say, the current time rounded to the nearest second — an attacker who could guess roughly when the password was created would have far fewer possibilities to test. Strong generation eliminates that shortcut entirely: every character is drawn from a genuinely unpredictable source, so a twelve-character password really does have the astronomical number of combinations that makes brute force impractical.
RNG in Games of Chance
Randomness is the entire foundation of any game of chance, from a simple dice roll in a board game to the digital reels of an online slot. Here the requirement is not just that outcomes look random, but that they are provably fair — no player, and not even the operator, should be able to predict or influence the next result.
Regulated online games take RNG certification seriously. In licensed markets, every game must use a generator that has been independently audited by a specialist testing laboratory, and operators are required to publish each game's theoretical return to player (RTP): the percentage of all wagered money the game is mathematically designed to pay back over millions of rounds. A contemporary video slot such as Pragmatic Play's Gold Party, for instance, documents a high-volatility math model with a published RTP of around 96% and clearly defined bonus mechanics. Those figures are only meaningful because a certified RNG guarantees that every spin is statistically independent of the one before it — exactly the property that standards bodies such as the NIST random bit generation project and independent auditors like eCOGRA are set up to verify.
The lesson generalizes well beyond gaming: a random number is only as trustworthy as the process that produced it, and independent verification is what turns a claim of randomness into something you can actually rely on.
How to Judge Whether an RNG Can Be Trusted
Whether you are choosing a password manager, a cryptographic library, or any tool that promises unpredictability, a few practical questions separate the trustworthy from the questionable:
- Does it use a cryptographically secure generator? For anything security-related, an ordinary PRNG is not enough. Look for explicit mention of a CSPRNG or the operating system's secure random source.
- Where does its entropy come from? Good generators seed themselves from genuine physical unpredictability, not from a fixed or easily guessed value.
- Has it been independently reviewed? Open standards and third-party audits, like the certification labs used in regulated gaming, are strong signals that the randomness has been tested rather than merely asserted.
- Is the output reproducible? If a supposedly secure generator produces the same "random" result under the same visible conditions, its seeding is broken.
Conclusion
Random number generation is one of those invisible foundations that most software quietly relies on and most users never think about. But the quality of that randomness is exactly what stands between a strong password and a guessable one, or between a fair game and a rigged one. The same principle underpins both: unpredictability must come from a sound source and, ideally, be verified by someone other than the party that benefits from it.
If you want to put good randomness to work protecting your own accounts, download EZ Password Secure and let its built-in generator create strong, truly unpredictable passwords for every site you use.
← Back to Blog