3 ms·
I had never heard of PwdHash (linked from the article, https://www.pwdhash.com/ https://www.pwdhash.com/) before. SuperGenPass (http://supergenpass.com/ http://
by roryokane 16y ago
I had never heard of PwdHash (linked from the article, https://www.pwdhash.com/ https://www.pwdhash.com/) before. SuperGenPass (http://supergenpass.com/ http://supergenpass.com/) is an alternative that uses a bookmarklet rather than a browser extension. (PwdHash links to a bookmarklet deep on its site, but nothing happened when I tried to use it.) SuperGenPass also allows for variable password length given the same master password, and its site is designed better. If you’re concerned about sites interfering with the bookmarklet using malicious JavaScript, there are unofficial browser extensions for SuperGenPass too. I don’t use any password manager right now, but I would recommend SuperGenPass over PwdHash.
The only factor I’m unsure about is the hashing algorithm: I’m not sure whether either SuperGenPass’s or PwdHash’s is safe. I couldn’t find what PwdHash’s algorithm was after a quick look on its site. SuperGenPass uses multiple iterations of MD5 – bcrypt would be a better algorithm, but I don’t know whether repeated-MD5 is unsafe or acceptable. (The aspect of the hashing algorithms I’m worried about is the speed at which an attacker can brute-force the password.)
- baddox 16y agoI've been using PwdHash for a while now, and I'm really happy with it. Their site lists extensions for Firefox and Chrome which work great. I'm also unfamiliar with their actual algorithm, but there looks to be more info on their project page.