Re:Double Blind Passwords a.k.a. Horcruxing
by poglet on Tuesday December 22, 2020 @07:49PM
(#25513229)
Thank you for this.
So if I need to change my 'amazon' password, I press 'generate different codes'. Then when I need to use my amazon password, I come back and click the 'generate different codes' to retrieve the new password?
What is the best way to use this for a service where the password frequently changes?
Re:Double Blind Passwords a.k.a. Horcruxing
by melonkidney on Wednesday December 23, 2020 @03:11AM
(#25515556)
If you need to change your 'amazon' password, you click 'generate different codes', yes. That action will be remembered in your browser's local storage. So when you need to use your amazon password again, it will automatically advance and generate the correct password.
But if you come from a different browser, you'll need to click 'generate different codes' again to advance to the correct password.
For services where the password frequently changes, I don't think there's a very practical way to use this. At least not across several different browsers.
Re:Double Blind Passwords a.k.a. Horcruxing
by buzzerbetrayed on Tuesday December 22, 2020 @01:33PM
(#25509531)
> Your verification code is 120179. You can use it to verify your seed password in the future.
What does this mean? And how is it used to verify a password?
Re:Double Blind Passwords a.k.a. Horcruxing
by melonkidney on Tuesday December 22, 2020 @06:13PM
(#25512568)
The "verification code" is a 6-digit hash calculated from the seed password. The idea is, you'll become used to recognizing the same verification code whenever you type your seed password - then you can quickly spot if you ever make a typo in the seed password.
Mine is web based, but all implemented in the front-end; no data is ever sent to the server.
I was debating whether to post the URL, because I don't really want a bunch of people to start depending on it the way I do (I have zero plans to maintain/improve it). But I feel like there may be sufficient interest. So the URL is in my profile for the next 48 hours.