Skip to content

Latest commit

 

History

History
47 lines (36 loc) · 3.05 KB

README.md

File metadata and controls

47 lines (36 loc) · 3.05 KB
Raw

PwdHash Sidebar

PwdHash (by Stanford) generates passwords resistant to theft and phishing by hashing a combination of the sites address and your password. It is available as browser extensions (Firefox, Chrome, Opera <12), apps (Android, iOS, Windows), scripts (Ruby, Python) or a simple web page which uses Javascript.

Not yet supported: PwdHash by Cambridge is a proof-of-concept alteration of the original Stanford PwdHash, but with a number of improvements that fix some of the weaknesses of the original. PwdHash-PoC uses the Forge implementation of PBKDF2-SHA512 to generate hashes.

This version of PwdHash is both a web extension for common browsers (like Firefox, Chrome and soon Edge) as well a simple web page. You can install it as an add-on or just save the whole page locally.

Usage

Web: You can just use the web version, alternatively press Ctrl+S, save the whole page locally and use it offline. Enter an address and a password. After pressing return on the password field, the hash should be copied to your clipboard.

Firefox: Make sure the button is added to your toolbar, click it or press F8 to open the toolbar menu. The address is prefilled (but can be modified). After pressing return on the password field, the hash is copied to your clipboard. Alternatively you can press Ctrl+F8 to open the sidebar.

Chrome (unpublished): Click on the button or press Alt+P to open the toolbar menu. The address is prefilled (but can be modified). After pressing return on the password field, the hash is copied to your clipboard.

Edge (unpublished): Click on the button to open the toolbar menu. The address is prefilled (but can be modified). After pressing return on the password field, the hash is copied to your clipboard.

Screenshots

Enter your password to generate a hash for the respective page by opening the sidebar by pressing Ctrl+F8

Authors

This software was created by quassy and is released under the BSD licence.

It is based on the previous work of several authors:
Standford PwdHash: Blake Ross, Collin Jackson, Nicholas Miyake, Dan Boneh, John C. Mitchell (BSD)
md5.js: Paul Johnston & Greg Holt, Andrew Kepert, Ydnar, Lostinet (BSD)
genpass, domain extractor: Chris Zarate (public domain)