3 ms·
Interesting.. I hope the generator function is non reversible? I.e., if you know the password ("qnQTs0-QO-9osX-me4)M" in this case) and your policy, could you f
by hucker 13y ago
Interesting.. I hope the generator function is non reversible? I.e., if you know the password ("qnQTs0-QO-9osX-me4)M" in this case) and your policy, could you find the master password?
- icebraining 13y agoYou can use a cryptographic hash on it. It's how SuperGenPass works: http://supergenpass.com/ http://supergenpass.com/ (Personally, I use an homegrown script that runs outside the browser, but does something similar)
- mhaymo 13y agoAm I wrong to be turned off by the fact it uses MD5? Still far more secure than anything I could do in my head I suppose.
- nicwolff 13y agoYeah. I wrote the password-hash generator that SuperGenPass and most others credit as their inspiration, and I moved mine http://angel.net/~nic/passwd.current.html http://angel.net/~nic/passwd.current.html on to SHA-1 years ago.