Editing How it works

From PasswordMaker

Jump to: navigation, search

Warning: The database has been locked for maintenance, so you will not be able to save your edits right now. You may wish to cut-n-paste the text into a text file and save it for later.

The administrator who locked it offered this explanation: It appears something is broken, so the wiki is in Read Only Mode until the attack is blocked, or an up to date version of the wiki is installed

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Current revision Your text
Line 1: Line 1:
You provide PasswordMaker at least two pieces of information: a ''master password'' -- that one, favorite password you like -- and a text [http://en.wikipedia.org/wiki/String_(computer_science) string] that is unique to that particular password. For web based accounts, this will usually be the [http://en.wikipedia.org/wiki/URL URL] of the website requiring the password. In fact, this is the default for such sites, although it can be changed if desired. For internet applications without URLs, such as [http://en.wikipedia.org/wiki/Instant_messaging instant messaging] - or some other password that you want to generate using PasswordMaker that is not internet related at all - you can make up any text you like, e.g., "aolinstantmessenger.com", "my-aol-im", or "MyBank_PIN").
You provide PasswordMaker at least two pieces of information: a ''master password'' -- that one, favorite password you like -- and a text [http://en.wikipedia.org/wiki/String_(computer_science) string] that is unique to that particular password. For web based accounts, this will usually be the [http://en.wikipedia.org/wiki/URL URL] of the website requiring the password. In fact, this is the default for such sites, although it can be changed if desired. For internet applications without URLs, such as [http://en.wikipedia.org/wiki/Instant_messaging instant messaging] - or some other password that you want to generate using PasswordMaker that is not internet related at all - you can make up any text you like, e.g., "aolinstantmessenger.com", "my-aol-im", or "MyBank_PIN").
-
Through the magic of your favorite [http://www.webopedia.com/TERM/O/one-way_hash_function.html one-way hash algorithm] (Passwordmaker currently supports [[FAQ#Which_hash_algorithms_are_supported.3F|all of these]]), PasswordMaker uses the ''master password'' and the URL/text [http://en.wikipedia.org/wiki/String_(computer_science) string]) that you provided, plus the [[FAQ#How_do_the_account-settings_and_algorithm_I_choose_work_together_to_generate_passwords.3F|account settings as modified by you]], to calculate what is known as a [http://en.wikipedia.org/wiki/Cryptographic_hash_function digital fingerprint] - or hash - which can then be used as your password for the website.
+
Through the magic of your favorite [http://www.webopedia.com/TERM/O/one-way_hash_function.html one-way hash algorithm] (Passwordmaker currently supports [http://wiki.passwordmaker.org/index.php/FAQ#Which_hash_algorithms_are_supported.3F all of these]), PasswordMaker uses the ''master password'' and the URL/text [http://en.wikipedia.org/wiki/String_(computer_science) string]) that you provided, plus the [http://wiki.passwordmaker.org/index.php/FAQ#How_do_the_account-settings_and_algorithm_I_choose_work_together_to_generate_passwords.3F account settings as modified by you], to calculate what is known as a [http://en.wikipedia.org/wiki/Cryptographic_hash_function digital fingerprint] - or hash - which can then be used as your password for the website.
Although one-way hash algorithms have a number of interesting characteristics, the one capitalized on by PasswordMaker is that the resulting hash (password) "does not reveal anything about the input (your <i>master password</i>) that was used to generate it.[http://java.sun.com/j2se/1.4.2/docs/guide/security/CryptoSpec.html#MessageDigest]"   
Although one-way hash algorithms have a number of interesting characteristics, the one capitalized on by PasswordMaker is that the resulting hash (password) "does not reveal anything about the input (your <i>master password</i>) that was used to generate it.[http://java.sun.com/j2se/1.4.2/docs/guide/security/CryptoSpec.html#MessageDigest]"   
Line 7: Line 7:
In other words, if someone has one or more of your generated passwords, it is [http://www.certifyit.com/_Definitions.htm ''computationally infeasible''] for him to derive your master password or to calculate your other passwords. Computationally infeasible means even computers [http://krone.physik.unizh.ch/~stadel/zBox/ like this] won't help!
In other words, if someone has one or more of your generated passwords, it is [http://www.certifyit.com/_Definitions.htm ''computationally infeasible''] for him to derive your master password or to calculate your other passwords. Computationally infeasible means even computers [http://krone.physik.unizh.ch/~stadel/zBox/ like this] won't help!
-
Security features offered by the [[Firefox/Mozilla/SeaMonkey/Flock/Netscape|Browser Extension version]] of PasswordMaker - such as the ability to automatically insert both usernames and the generated passwords into a web sites' username and password fields, helps protect you from [http://en.wikipedia.org/wiki/Keystroke_logging key-loggers] and/or [http://en.wikipedia.org/wiki/Trojan_horse_(computing) trojan horses] that some [http://en.wikipedia.org/wiki/Black_hat "Black Hats"] use to try to steal passwords. For more details, visit the [[FAQ]].
+
Security features offered by the [http://wiki.passwordmaker.org/index.php/Firefox_/_Gecko Browser Extension version] of PasswordMaker - such as the ability to automatically insert both usernames and the generated passwords into a web sites' username and password fields, helps protect you from [http://en.wikipedia.org/wiki/Keystroke_logging key-loggers] and/or [http://en.wikipedia.org/wiki/Trojan_horse_(computing) trojan horses] that some [http://en.wikipedia.org/wiki/Black_hat "Black Hats"] use to try to steal passwords. For more details, visit the [[FAQ]].
== What About Portability? ==
== What About Portability? ==

Please note that all contributions to PasswordMaker may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see PasswordMaker:Copyrights for details). Do not submit copyrighted work without permission!


Cancel | Editing help (opens in new window)
Personal tools