Show HN: Correct Horse Battery Staple password generator
correcthorse.pw
Show HN: Correct Horse Battery Staple password generator
1–10 of 99 posts
Re: Show HN: Correct Horse Battery Staple password generator
#2Background: I liked the xkcd-style password generation scheme as it was easy to remember, but existing generators online (that I could find, at least) all use Math.random() or other cryptographically insecure random number generators. While an actual attack on the RNG seems far-fetched, the very idea doesn't sit well with my crypto nerd side. So I decided to create my own that uses a CSPRNG that I can trust. This was a while ago.
Recently, I decided to package it up with a nice domain name and publish it in hopes that it would be useful to others.
Re: Show HN: Correct Horse Battery Staple password generator
#3See also https://theworld.com/~reinhold/diceware.html (the "original", as far as I know).
KeePassXC has a passphrase generator, although it doesn't use the Diceware list as far as I know. https://keepassxc.org/images/screenshots/linux/screen_006.pn...
EDIT: Love the simplicity of https://correcthorse.pw/, good work!
Re: Show HN: Correct Horse Battery Staple password generator
#4I tend to rely on https://www.rempe.us/diceware/#eff for my typeable password needs.
80% of my passwords are just line noise, because they live in a keepass database. 20% (workstation account logins, etc) are diceware.
Re: Show HN: Correct Horse Battery Staple password generator
#5You can achieve this with a one-liner:
shuf -n 4 /usr/share/dict/words
Re: Show HN: Correct Horse Battery Staple password generator
#6Shout out to the open source Bitwarden project which includes this out of the box. Check out bitwarden_rs for a good sefhosted option.
Re: Show HN: Correct Horse Battery Staple password generator
#7While I would love to use something like this, almost every site I can think of enforces worthless password rules like "Must include number, letter, special character" etc which effectively blocks these types of passwords.
Re: Show HN: Correct Horse Battery Staple password generator
#8Background: I liked the xkcd-style password generation scheme as it was easy to remember, but existing generators online (that I could find, at least) all use Math.random() or other cryptographically insecure random number generators. While an actual attack on the RNG seems far-fetched, the very idea doesn't sit well with my crypto nerd side. So I decided to create my own that uses a CSPRNG that I can trust. This was…
What about https://www.random.org/? Why even use a PRNG if you can have the real thing?
Re: Show HN: Correct Horse Battery Staple password generator
#9You forgot the translate to Finnish step
Re: Show HN: Correct Horse Battery Staple password generator
#10[deleted]