3 ms·
I used a small script to generate my passwords : I choose a simple password, I append the domain and I hash the string. I take the first 15 characters of the h
by aaraujo 9y ago
I used a small script to generate my passwords :
I choose a simple password, I append the domain and I hash the string. I take the first 15 characters of the hash as a password. I find it quite convenient and easy to remember !
sha256("password"+domain)
- TheHCA 9y agoThis seems like one of the simpler solutions on here, what's your process of dealing with sites that require special characters etc?
- aaraujo 9y agoI add a special character at the end when it's needed
- drdaeman 9y agoThis works, but doesn't scale. The problem is, the login form doesn't remind that a) a special character was required and b) what characters that particular site thinks are "special".
- barrkel 9y agoFWIW, it's really rare for a mixed-case alphanumeric password to be rejected. Typically it's only banks and corporate logins. Those are sufficiently special-case to make an exception.
- barrkel 9y agoDownvoted! :) Amusing for actual lived experience to be denied! (Data: I have 72 logins currently cached in Firefox. Every single one of those sites accepts 10-character mixed case alphanumeric passwords with no extra special character requirements. About once a year I come across a site that needs one.)
- drdaeman 9y agoI've checked my password manager and I think your stats roughly match what I see - about 1 in 100 sites seem to have smartass requirements to passwords, others (correctly) don't care. Still, I'd say it's inconvenient to have "special cases" to remember about. Even if they're something important, like banking. --- Someone had mistaken downvote with "I disagree" rather than "unhelpful". Upvoted you, as I think your comment was helpful and contributed to the discussion. But this is going off-topic (and discussing votes is something we should refrain from)
- netsharc 9y agoSo... your passwords are 15 characters of the combination 0-9, a-f?
- aaraujo 9y agoYes. But I do add a special characeter and/or a maj at a certain place when it is needed
- yread 9y agoSmart of you to use a throwaway account :)
- v_lisivka 9y agoWhy not use base64 instead? 64 random characters are much better than 16. $ perl -e 'use Digest::SHA "sha256_base64"; print sha256_base64("master_password mail.google.com"), "\n";' g/sOxZfr2DFE12r8Gs/D0bhwat5kku41L+kFmuCCQOo
- ecesena 9y agoThat's what I ended up for MemPa (described above). The idea is that I can't read binary sha256 output, and everything I know that can translate in hex can also translate in base64 leading to shorter secrets. For the special chars, I chose the Safari way of encoding, i.e. I only extract alpha-numberics from base64, and add a "-" every 3 chars. This also improves readability. I assume that if Apple chose this way of doing, either they studied it and/or sites will conform to that.
- ecesena 9y agoYou may want to have a look at MemPa (also commented above) [1]. Please LMK what do you think, info in my profile. [1] https://hackernoon.com/mempa-a-modern-deterministic-password-manager-2c0f28fa108b https://hackernoon.com/mempa-a-modern-deterministic-password...