4 ms·
If you're going to use an algorithm (which seems like a bad idea), wouldn't it be safer to keep a large secret key and then hmac or hash(key + service name) as
by wybiral 9y ago
If you're going to use an algorithm (which seems like a bad idea), wouldn't it be safer to keep a large secret key and then hmac or hash(key + service name) as your password?
- ythn 9y agoAt that point just use a manager. The point of an algorithm is that you can generate it using only your brain. Your brain can't easily calculate hashing digests.
- wybiral 9y agoI agree. But if the goal was for it to be universal enough to work anywhere without the password manager installed then these crypto primitives would work. You'd still be relying on the strength of those primitives and your secret key so it's not nearly as secure as randomly generated password. So, yeah, use a password manager.