Password Manager
How it works:
- You type in your secure master password
- The Generator hashes (using SHA-256) the secure password, website url and salt (Optional) to create a distinct password for each site
- The password is never stored, the user must do this each time they visit the site
Password Generator
Generated Password:
The generated password will always be the same given the same input
Benefits:
- You only have to rememeber 1 strong password
- Application does not store your passwords anywhere unlike common Password Managers making it more secure
- If one of your passwords get leaked, all your other passwords stay secure
- Because of the properties of hashing (it is extremely hard to go from hash to original), the master password cannot be derived from site specific generated passwords
Cons:
- Since your master password is not stored anywhere, there is no way to reset it if you forget
- If someone get's your master password and knows you use the password manager, they can have acess to any of your accounts (Same flaw as a regular Password manger). Make a strong Master Password!!
- If your password gets leaked or you have to change your password for any other reason, you would have to add a salt to the hash (Could be as simple as a single digit) and remember that for future logins