4 ms·
So, I built something almost identical for myself[1] but lately I've been switching to 1Password. Why? Essentially, it's difficult/impossible to create password
by enoch_r 13y ago
So, I built something almost identical for myself[1] but lately I've been switching to 1Password. Why? Essentially, it's difficult/impossible to create passwords for all the weird/stupid requirements people think up (no more than X characters, no symbols, require at least 2 symbols, etc.) without storing information about the passwords themselves somewhere. And once you have infrastructure for storing information about passwords, well, you might as well just encrypt the password itself and store that.
In the end, it was fun to build and a cool proof of concept, but the problem it solves is solved more robustly and just as securely by existing solutions.
[1] http://mawud.com http://mawud.com
- qznc 13y agoThe requirements could be integrated into the generation scheme. As long as it is reproducible, you are fine. Essentially something like a pipe: "pretty long passphrase I use for everything" + "bank" | bcrypt | only numbers | length 4
- gtrubetskoy 13y agoNice!