2 ms·
I second this, and I don't really know if a memory-deficient password manager is a _good_ thing. > Final password is cryptographically derived from web page UR
by gmemstr 8y ago
I second this, and I don't really know if a memory-deficient password manager is a _good_ thing.
> Final password is cryptographically derived from web page URL address, salt and user provided secret passphrase. The salt should be stored physically, so you can recover it in the future.
I didn't really know, at first glance, what this project accomplishes besides generating a random password, although looking through some of the screenshots it looks like passwords are _always_ generated on-page instead of storing an encrypted vault. A super cool idea, but I'd be curious what everyday use of it would look like, and since I don't use Chrome I can't really test it myself.
- viralpoetry 8y agoHi, author here. You are right, the password is generated on the fly using URL, unique seed and provided passphrase. The extension javascript is sandboxed from the webpage, so it is not possible to obtain the inputs to the PBKDFunction from the context of website. I have coded this for myself and using it more than 2 years. The only problems are with some dynamically created login forms, like new reddit login.