4 ms·
I may be the inventor of in-browser hash-based password generation – at any rate, most of the early variants like SuperGenPass [1] credit mine [2] as the origin
by nicwolff 10y ago
I may be the inventor of in-browser hash-based password generation – at any rate, most of the early variants like SuperGenPass [1] credit mine [2] as the original. And I still use it for low-value sites – but I let iCloud Keychain generate, store, and sync passwords for e-commerce sites and e-mail services, for all the reasons mentioned by others here.
[1] https://github.com/chriszarate/supergenpass/wiki/FAQ https://github.com/chriszarate/supergenpass/wiki/FAQ
[2] http://angel.net/~nic/passwd.current.html http://angel.net/~nic/passwd.current.html
- bascule 10y agoDoes your work predate Stanford PwdHash? https://crypto.stanford.edu/PwdHash/ https://crypto.stanford.edu/PwdHash/
- nicwolff 10y agoMaybe! archive.org's oldest capture of my page [0] is from 22 Dec 03, and doesn't have anything for Stanford's until 9 Apr 04 [1]. But I don't think they got the idea from me, since the first links to my page from blogs and aggregators came in Sep 04 after I added the bookmarklet [2]. [0] https://web.archive.org/web/20031222201145/http://angel.net/~nic/passwd.html https://web.archive.org/web/20031222201145/http://angel.net/... [1] https://web.archive.org/web/20040507195550/http://crypto.stanford.edu/PwdHash/ https://web.archive.org/web/20040507195550/http://crypto.sta... [2] http://jonudell.net/udell/2004-09-07-nic-wolffs-single-signon-bookmarklet.html http://jonudell.net/udell/2004-09-07-nic-wolffs-single-signo...