3 ms·
I think I share your same concerns: I don't want to rely on any single application for my entire security (and some passwords are my entire security). I recent
by ecesena 9y ago
I think I share your same concerns: I don't want to rely on any single application for my entire security (and some passwords are my entire security).
I recently blogged about the algo I use [1], it's a simple deterministic base64(sha256(.)), which is easy to remember and apply everywhere.
The post was pretty successful compared to my usual views/comments, and with a group of friends (all former researcher in security) we started building a MemPa [2], which we just released for iOS/Android.
[1] https://hackernoon.com/how-i-manage-my-passwords-technical-version-8549dc1bde1e https://hackernoon.com/how-i-manage-my-passwords-technical-v...
[2] https://hackernoon.com/mempa-a-modern-deterministic-password-manager-2c0f28fa108b https://hackernoon.com/mempa-a-modern-deterministic-password...
- kentbrew 9y agoWhat do you do for situations where a service has force-expired your password?
- ecesena 9y agoIn my personal case I have no such passwords. This said, you can use the counter. The counter isn't necessary an incremental int, you can also for example use yymm if you want to "auto renew" your password every month. So far we haven't implemented anything in MemPa, but we were discussing this last option. Would be great to hear what do you think.