Re:Toward Better Master Passwords
by shazow on Saturday June 25, 2011 @11:07PM
(#2697262)
Thanks!
I agree, there are a few issues with SGP I would fix: It fails badly on Change Password forms, it uses ~10-iteration MD5 hashes which are easily-reversible today, and the default character set for the generated passwords is not great.
I feel I'm still in the "research" stage where I want to see if I can survive with using something like SGP. I'll definitely switch over to the extension from now, though.
Side note: It's probably not a terrible idea to still maintain multiple master passwords for really-important vs throw-away accounts.
I agree, there are a few issues with SGP I would fix: It fails badly on Change Password forms, it uses ~10-iteration MD5 hashes which are easily-reversible today, and the default character set for the generated passwords is not great.
I feel I'm still in the "research" stage where I want to see if I can survive with using something like SGP. I'll definitely switch over to the extension from now, though.
Side note: It's probably not a terrible idea to still maintain multiple master passwords for really-important vs throw-away accounts.