4 ms·
> 1. Your passwords are generated on-the-fly based on a pure algorithm > 2. Nothing is stored so there’s nothing to steal [...] > 4. No need to sync data, as
by ketralnis 11y ago
> 1. Your passwords are generated on-the-fly based on a pure algorithm
> 2. Nothing is stored so there’s nothing to steal
[...]
> 4. No need to sync data, as there’s nothing to sync!
If there's only one possible password for a given website, and every password is stateless, how do you change the password if it's compromised?
- pstrateman 11y agoEven worse, how do you handle sites that restrict valid passwords?
- duaneb 11y agoYea, that makes this approach useless.
- stephanerangaya 11y agoi was thinking the same, maybe you change the keyword, but then you need to remember that you changed it.. not very convenient.
- msl09 11y agoYeah, my personal password manager is mostly that but with salt and other shenanigans, the algorithm is : bytestring = hash(master_password + url_domain + random_salt + persona) password = translate( bytestring, alphanumeric + special_symbols_required_for_the_site )[:max_allowed_length_for_website] print(password) storage[(url_domain, persona)] = ( random_salt, max_allowed_length_for_website, special_symbols_required_for_the_site ) The advantage is that it's safer than password managers that store your passwords or require you to send your password over the internet, and it's more flexible than managers that do not store any information. The problem is that you need to copy your database file to each device you use , that can be specially frustrating when I need to use android, for instance.