PWDHMAC

By DarkBls Last update Aug 26, 2009 — Installed 221 times.

Script Summary: Per-site strong password Generator



Version: 1.0.2

License: (CC) Attribution Non-Commercial Share Alike; http://creativecommons.org/licenses/by-nc-sa/3.0/

---=== Description ===---

Allow to generate a unique strong password for each site without remembering anything but only one password for all.

---=== Manual ===---

PWDHMAC display a small icon (magnifying glass) beside each password input on any website.
You just have to put a generic password and hit F4. A strong password is generated instead of your one and the icon become a lock pad.

If the password field doesn't have the magnifying glass (field dynamically displayed in the page), just hit F2 to rescan for the password fields.

NOTE: Since the password field is dynamicaly filled, you should press the left arrow key (for exemple) to trigger any JS on the original webpage.

---=== How it works ? ===---

The generated password is the result of the HMAC-SHA1 (key, value) where "key" is your password and "value" is the website domain (with sub domain). The result is then mapped to printable chars (a-z, A-Z, 0-9, special chars).

The length of the generated password is 20 chars.