2 ms·
> A better way is to use a scheme that hashes your username, service name, and master password to generate a password. A problem is that this doesn't always com
by IncRnd 9y ago
> A better way is to use a scheme that hashes your username, service name, and master password to generate a password. A problem is that this doesn't always comply with the arbitrary demands on your password.
This is a very bad mechanism to create passwords that will create severe security vulnerabilities. You are adding complexity and false-security without benefit.
Passwords are a secrecy mechanism, not a formula mechanism. In your method, all one needs is the formula, then all passwords will be disclosed.
The suggestion might then be to interject a secret with enough entropy into the text being hashed. But, that is no different from a secret password itself!