Linked Questions

3
votes
3answers
234 views

Is MasterPasswords password generation method good? [duplicate]

I've just discovered the open source project MasterPassword. It generates a password per site based on name, master password, site and counter. So you need to know your name and the master password to ...
2
votes
2answers
834 views

Password generation based on hash of master password + suffix? [duplicate]

Is this [1] a secure and reasonable way to generate a unique password for login on various websites? echo -n my_strong_master_password#website.com | sha1sum Of course, if my system is compromised ...
2
votes
4answers
205 views

Is it a good idea to to use secure_hashing_function(mypassword.url) as my password? [duplicate]

Like many users it's very difficult for me to use a different password for every website I have an account with. It does not matter how complex my password is if ONE naive website stored it in clear ...
0
votes
1answer
122 views

Is hashing the concatenation of my password and account type secure? [duplicate]

Concept The goal of a password manager is to reduce the number of passwords which one must memorize down to one, and then have all other passwords be encrypted under that master password. My solution ...
1
vote
1answer
148 views

Is using an app with a password generation algorithm as secure as a using a password manager? [duplicate]

I found the Master Password app which uses a password generation algorithm to generate a different password for each site based on the sites name, the users name and a master password. It seems like a ...
0
votes
0answers
58 views

LessPass's approach is equal “one password for all sites”? [duplicate]

Here is description how does it works. It is open source solution which generate the password by login, site and master password. It looks like "one password for all sites". Is it right? In general, ...
811
votes
12answers
223k views

How to securely hash passwords?

If I hash passwords before storing them in my database, is that sufficient to prevent them being recovered by anyone? I should point out that this relates only to retrieval directly from the database,...
43
votes
10answers
8k views

What type of pattern should I use for my passwords?

I have a lot of accounts and until some time ago I used an universal password for all of them. Right now I have a different password for every account depending on the website name that I am logging ...
22
votes
5answers
5k views

Is this idea for a password manager secure? If so, why doesn't anybody use it? [closed]

I've been thinking of a problem with usual password managers: although they do provide better security than manually using passwords, there's a central database that can get lost, get compromised, etc....
-2
votes
1answer
427 views

A mental uncrackable password-generator

I am interested in creating a formula to create unique passwords for every website that I am going to use. These passwords should be easy to figure out (not necessarily remember) for me at any point ...
0
votes
1answer
81 views

Deterministic password generation using Yubikey

I like LastPass but having to have it as a browser plugin means an attacker could steal all my passwords at once. It makes a lot of sense to use a hardware device to store my passwords, like yubikey ...