I use a self-made password manager that generates strong passwords based on one strong key and easily rememberable strings for each website/account. The basic principle can be most easily conveyed by pseudocode:
key = raw_input("Enter key: ") url = raw_input("Enter URL: ") // like jons3.serverfault or something similar easily rememberable pw = sha512(key + url) pw = base64_encode(pw) pw = pw[0:16] print pw % or set the clipboard, etc., etc.
Now I am considering implementing some additional features:
- Advanced password management. I.e. I don't need to enter the key itself, it resides on the hdd in an encrypted form, so I only need to input some easier password to decrypt it. A possibility to have multiple passwords that can decrypt the same key. A possibility to have one-time passwords. A possibility to have several keys. Etc.
- Capability to run the manager as a daemon on a server.
- Multi-platform clients that can talk to the server.
Being lazy, I hope that someone has already implemented the concept and at least some of the desired features. Does anyone know such password manager?