Script Summary: A lightweight, secure password manager. Memorize just one password and hashPass will give you all of the benifits of memorizing a different password for each of your online user accounts. Almost zero user interaction required.
hashPass gives you the benifits of memorising a different password for each of your online user accounts without requiring you to memorise more than one master password. hashPass does this without saving any data on your hard disk, the cloud, or anywhere, and without requiring you to significantly change the way you browse the web. hashPass accomplishes this through the use of an SHA, A nearly impossible to invert mathematical function which takes in two strings and outputs a random-looking yet deterministically generated third string.
hashPass works its magic in the moment after you enter your username and password into a form and hit the “login” button, and before the website processes the information you just entered. Before sending your information along to the website, hashPass replaces the text you wrote into the password box with the result of running that password and the website’s domain name through an SHA.
If you run hashPass, even if you only know one password, each website you use sees a different password than every other website you use ,as the passwords the websites see were generated with different domain-name strings in the hashing process. Because the result of the SHA is nearly impossible to invert, even if some unauthorized person gets your login information on one web service, they won’t be able to figure out what you use as a master password for all of your other web services.
Hashpass injects a hashtag icon onto all password fields on a website, making them look like this:
All fields with the above icon hash the text entered into them with the name of the website they’re on upon form submission.
If you don’t want some password field to be hashed upon form submission (if, for example, you are changing your old, unhashed password into a new, secure hashed password) hit the ctrl button while the field is selected. This changes the form’s icon to the black hash:
Fields with the black hash icon don’t get hashed upon form submission. hashPass remembers which forms you’ve blackhashed to provide a consistent web browsing experience.