SuperGenPass is a much better, simpler, and safer alternative, IMO.
Password Chart
21–30 of 47 posts
Re: Password Chart
#22SuperGenPass is a much better, simpler, and safer alternative, IMO. http://supergenpass.com
Nice! This is pretty much exactly what I was looking for!
Re: Password Chart
#23SuperGenPass is a much better, simpler, and safer alternative, IMO. http://supergenpass.com
It constantly surprises me that supergenpass hasn't caught on more with geeks. It's a pretty elegant solution to a problem everyone has.
Re: Password Chart
#24SuperGenPass is a much better, simpler, and safer alternative, IMO. http://supergenpass.com
It constantly surprises me that supergenpass hasn't caught on more with geeks. It's a pretty elegant solution to a problem everyone has.
Looks interesting but my first thought is that if I want to access my gmail on someone else's computer I would need to install the firefox extension first.
Re: Password Chart
#25SuperGenPass is a much better, simpler, and safer alternative, IMO. http://supergenpass.com
By typing the master password into the destination form, then replacing it, the master is potentially revealed to any target site that might use JS/AJAX to view the password before form submission. So, this is not helpful against the "one bad (or compromised) site steals my master password" threat.
If SuperGenPass were to pop its own window, calculate the site-specific complex password, then insert that into the form, it could probably be safe -- but would still need very careful design. (Once a bookmarklet starts interacting with a page, it might reveal its internal state to that page.)
Re: Password Chart
#26SuperGenPass is a much better, simpler, and safer alternative, IMO. http://supergenpass.com
By typing the master password into the destination form, then replacing it, the master is potentially revealed to any target site that might use JS/AJAX to view the password before form submission. So, this is not helpful against the "one bad (or compromised) site steals my master password" threat. If SuperGenPass were to pop its own window, calculate the site-specific complex password, then insert that into the form…
Yes, that is still a threat, and I would love to see SGP's algorithm make it into native addons for Firefox, Chrome, etc, triggered by a hotkey or toolbar button. However, my initial attempt fell flat when trying to wade through XUL, just didn't have enough time...
And if you're really that worried about a new site, the mobile version can be saved to your local disk and opened in a separate tab, and then copy-paste the generated password into the site in question.
Re: Password Chart
#27See also PasswordMaker: It has extensions supporting several browsers and a javascript version as well.
PasswordMaker uses your password and the website domain name to generate a unique password.
Re: Password Chart
#28Earlier quoted context omitted.
It constantly surprises me that supergenpass hasn't caught on more with geeks. It's a pretty elegant solution to a problem everyone has.
Looks interesting but my first thought is that if I want to access my gmail on someone else's computer I would need to install the firefox extension first.
It's just a bookmarklet, not an extension, and if you're not at your own computer, there's a "mobile" version that can be used from anywhere to generate the correct password.
Re: Password Chart
#29I use a form of the Vigenère cipher cipher that is simple enough that I can 'get' my passwords with a pen and paper (I've had to do this before for public terminals), but is also made less cumbersome with a simple little utility.
It isn't cryptosecure or anything, obviously, but it works well for my purposes. I've never been entirely comfortable with using someone else's web site or a password database (well, I use a password database at home, for example, but I have to have access to passwords remotely).
Re: Password Chart
#30SuperGenPass is a much better, simpler, and safer alternative, IMO. http://supergenpass.com
By typing the master password into the destination form, then replacing it, the master is potentially revealed to any target site that might use JS/AJAX to view the password before form submission. So, this is not helpful against the "one bad (or compromised) site steals my master password" threat. If SuperGenPass were to pop its own window, calculate the site-specific complex password, then insert that into the form…
You can always use the mobile version which IS a separate webpage that you type the domain and your password into and it generates your password (which you copy paste).
http://supergenpass.com/mobile/
Although this still requires that you trust supergenpass.com to not change the javascript it is serving you into something malicious.