Timeline for Is this idea for a password manager secure? If so, why doesn't anybody use it?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 17, 2015 at 16:38 | vote | accept | ithisa | ||
| Jul 16, 2015 at 17:02 | comment | added | Nobody | Not sure which term is right, peppering in the sense that it's only one for all generated password, salting in the sense that it's against precomputed hash tables, not as an additional secret. @Rory McCune is right. | |
| Jul 16, 2015 at 16:38 | comment | added | Ajedi32 | @Nobody Salting? You mean peppering? Otherwise, where are the salts stored for each account? Wouldn't you still need a database? | |
| Jul 16, 2015 at 16:28 | comment | added | Rory McCune | Of course salting would help, but it removes the benefit that was referred to in the Question where if the person went to a public computer they would be able to calculate their password just knowing their master password | |
| Jul 16, 2015 at 16:26 | comment | added | Nobody | I've written a (very simple) tool to generate such passwords for me. It uses salting and multiple rounds of several hashing algorithms to make it harder to go from a password back to the master. | |
| Jul 16, 2015 at 13:28 | history | answered | Rory McCune | CC BY-SA 3.0 |