OESF Portables Forum

Everything Else => General Support and Discussion => Zaurus General Forums => Archived Forums => Security and Networking => Topic started by: speculatrix on March 08, 2007, 08:14:19 am

Title: Secure Password Generator With Auto-populate
Post by: speculatrix on March 08, 2007, 08:14:19 am

Not really a Zaurus thing, but too useful not to share...

http://hubpages.com/hub/SuperGenPass-Simpl...sword_Generator (http://hubpages.com/hub/SuperGenPass-Simple_Password_Generator)

basically, you use a master password which uses the domain of the website you're on to generate, via a one-way md5 hash, a password for each website you visit.

thus you can have a unique pass for each site yet only need to remember the master pass

since it uses a pretty secure algorithm, as long as your master pass is unguessable and kept secret, you should be fairly safe!

p.s probably a good idea to save the master password generator page along with the javascript, so if the webpage disappears you can regenerate the bookmarklet.. so save this page "complete" http://labs.zarate.org/passwd_new/builder.html (http://labs.zarate.org/passwd_new/builder.html) and be sure it includes the builder.js script.

Title: Secure Password Generator With Auto-populate
Post by: harvell on March 08, 2007, 04:13:49 pm

That seems pretty cool.

Title: Secure Password Generator With Auto-populate
Post by: Da_Blitz on March 08, 2007, 11:20:59 pm

d&(#$ thats a good idea

at the moment i have some fairly long passwords that i remeber but its the infrequent ones that i forget, only porbel is that theses are local systems without a dns entry, might just use the ".local" instead

Title: Secure Password Generator With Auto-populate
Post by: speculatrix on March 09, 2007, 04:55:22 am

Quote

d&(#$ thats a good idea

at the moment i have some fairly long passwords that i remeber but its the infrequent ones that i forget, only porbel is that theses are local systems without a dns entry, might just use the ".local" instead
[div align=\"right\"][a href=\"index.php?act=findpost&pid=155804\"][{POST_SNAPBACK}][/a][/div]

well, set up a DNS entry then... I use "home.x.y.z" for my home systems, with an internal DNS server for forward (and reverse). In the outsite world, there's a wildcard entry so that when roaming I can use "imap.home.x.y.z" and it goes to the firewall instead, which can choose to let me in or not, and forward ports as appropriate (if I've done the port knock, for example), so I can rdesktop to my windoze box!