Secure Javascript Password Generator

March 13th, 2006

I’ve been working a few days on a password generator. It uses javascript and sha1 to generate an 8-character password (a truncated sha1 hash). It’s fairly simple, given a domain name and your ‘master password’, it can generate a password for every website you go to.



This is what the popup from the bookmarklet currently looks like. Easy eh?

Why is this handy? Well, its great because rather than using the same password for every website, this tool allows you to use your ‘master’ password for every site and it will, in turn, generate an sha1 password so that every website will have a unique password. This bookmarklet makes it so you never have to remember each password to every site. You only have to remember your master password. Also, it uses a one-way hash. No one can ever get a reverse hash or figure out your master password.
Also, if one site is hacked, you don’t have to worry about your password on other sites. Every site has a unique pass!
If you want to get started, go here for more information. It has a guide and some examples on how it all works. This works great with firefox. I’ve not tested it on other browsers. Feel free to leave feedback :)

Update: This does not currently work in Internet Explorer, and I probably won’t devote the time required to make it work in IE. I’m somewhat pro-firefox and ignore most everything else.

Powered by Loads of Caffeine